Description
DIRECTOR/MANAGER INFORMATION SECURITY
OVERVIEW
This is a hands-on, technical managerial position in which you'll function from a people, process, and planning perspective and as a key contributor to security architecture, engineering, and information technology decisions. You will report to the CIO.
POSITION SUMMARY
• Develop, implement, and monitor a strategic, comprehensive enterprise information security and risk management program for the organization
• Lead and manage a team of Information Security Analysts/Engineers responsible for the organization’s Information security program
• Drive application and network security activities; evaluate, design, deploy, support, and monitor information security systems. Influence peers and leaders with the goal of creating and maturing the security program.
• Lead the implementation of best-practice security procedures, standards, and guidelines; identify security exposures and develop mitigation plans; plan and run security awareness exercises and teach secure behavior and methods
• Lead incident management efforts, including tabletop and other preparatory engagements
• Develop, implement, and maintain all information security standards, policies, and controls across the organization
• Drive and influence software and infrastructure security across the organization
• Partner with security service providers to ensure 24x7x365 security operations for detecting, triaging, and remediation of security incidents. Exp. dealing with outsourced operations teams.
QUALIFICATIONS
• Minimum of 7+ years of IT experience, a minimum of five years of which need to be in an information security role. Intrusion detection is a HUGE +.
• A minimum of 3 years in a supervisory capacity, preferably in security operations (Team is 5-10)
• Strong experience in current and historically relevant Security concepts and technologies. Progressive experience in a combination of engineering, information security, and risk management roles that demonstrate expertise at a leadership level.