Head of IT Security

The Director of IT- Security is responsible for developing and leading the organization's IT Security function. This role will oversee at least one direct report and build the framework for a strong and sustainable security program. Key responsibilities include defining and executing the IT Security strategy, managing the company's online security awareness program, ensuring compliance with applicable standards, and maintaining the confidentiality, integrity, and availability of company systems and data. The Director will also lead risk management efforts, including penetration testing, remediation, and incident response planning. Additionally, this role manages the relationship with the organization's third-party IT Security partner, Arctic Wolf, following up on and implementing their recommendations to strengthen overall security practices and responsiveness to threats.

At PPC Partners we believe in the Power to Serve along with the Pursuit of Excellence. As such the following values guide our behaviors: A Servant's Heart -- Focus on the Needs of Others, Wisdom -- Insightful, Integrity -- Honesty and Trustworthy, Courage -- Decisive and Confident in Others, Humility -- Modest and Respectful, Passion -- Unfailing Dedication

 

Essential Duties and Responsibilities

Security Strategy & Development:

• Develop and define the organization's IT Security Strategy
• Manage the company's online security awareness program
• Align IT Security Strategy with organizational goals and compliance requirements
• Provide leadership and direction to ensure the confidentiality, integrity, and availability of company systems and data

Risk Management & Compliance:

• Lead quarterly penetration training and remediation and mitigation of findings
• Ensure compliance with relevant frameworks and standards
• Oversee incident response planning, including investigations, documentation, and corrective actions

Risk Management & Compliance:

• Lead quarterly penetration training and remediation and mitigation of findings
• Ensure compliance with relevant frameworks and standards
• Oversee incident response planning, including investigations, documentation, and corrective actions

Safety/Hazard Recognition & Elimination:

• Pre-plan and identify the methods to eliminate hazards daily by work task.
• Execute skill in observing habits and hazards of others and bringing it to their attention.
• Uphold safety as the most important goal of our company. Support goal of achieving zero accidents.
• Promote and encourage open communication between field and office regarding all safety concerns, suggestions, improvements, and PPE needed.
• Obtain safety training as expected by all company personnel.

 

Qualifications and Requirements

• 5-7 years experience in IT Security or Cybersecurity roles
• Bachelor's degree in Information Technology, Cybersecurity, or related field

Experience, Skill and Abilities

• Positive safety attitude and personal integrity -- both are non-negotiable
• Strong knowledge of network, system, and application security principles
• Proficient in security monitoring, threat detection, incident response, and risk assessment tools
• Knowledge of data privacy laws, compliance frameworks, and cybersecurity standards
• Excellent analytical, problem-solving, and organizational skills
• Strong communication skills
• Ability to work both strategically and hands-on in a fast-paced environment

Physical Requirements

• Office environment, requiring sitting and standing and extended amounts of time using a computer/keyboard at a single workstation.

PPC Partners is an Equal Opportunity Employer.