Vice President, Security & Compliance

POSITION LOCATION

This position is eligible for a hybrid work arrangement. Currently 5 days of on-site work per month are required. 

POSITION PURPOSE

The Vice President of Security and Compliance is a strategic leadership role responsible for developing, implementing, and overseeing the organization’s security, risk, and compliance programs. This role ensures the protection of company assets, data, and infrastructure (data center and cloud) while maintaining adherence to industry standards, government regulations, and best practices. This executive will lead cybersecurity, threat intelligence, internal audit, and compliance efforts, ensuring the organization is protected from evolving risks while maintaining industry standards.

DUTIES & RESPONSIBILITIES       

• Responsible for overseeing, directing and the overall success for the following areas:
  • Security
  • Threat Intelligence
  • Compliance
  • Internal Audit
• Define and execute the long-term vision and strategy for security and compliance across the organization.
• Serve as the subject matter expert for cybersecurity, data protection, privacy, and compliance practices.
• Act as a trusted advisor to the executive leadership and board on security and compliance risks.
• Develops and implement operational plans, policies, and goals which support strategic objectives.
• Keeps executive team well informed of area activities and significant problems.
• Oversees threat intelligence and vulnerability management programs to proactively identify and mitigate risks.
• Leads the development and implementation of security policies, standards, and procedures.
• Leads incident response and forensics teams to manage cybersecurity breaches and security incidents.
• Oversees third-party risk management, ensuring vendors adhere to security and compliance standards
• Ensures compliance with industry regulations and standards (ISO, SOC 2, NIST, DSS, etc.)
• Leads the development and maintenance of policies, procedures, and controls to meet regulatory requirements
• Oversees internal and external security and compliance audits, ensuring adherence to internal policies and external regulations
• Oversees enterprise risk management (ERM) strategies, identifying and mitigating cybersecurity and compliance risks
• Ensures that staffing levels are appropriate and human resources are effectively utilized. Interviews, hires, fires, and assigns personnel.
• Provides leadership to team through goal setting, delegation and communication.
• Cultivates and fosters team building and cooperation and motivates team members to achieve goals.
• Ensures that personnel are well trained, effective, and optimally used. Instructs personnel regularly regarding policy, procedure, and program changes.
• Conducts performance appraisals and coaches and mentors throughout the performance cycle.
• Formulates and implements corrective actions as needed. Provides measurable feedback and suggestions for improved performance.
• Responsible for timesheets and PTO requests for team members.
• Conducts meetings to ensure that personnel are well informed of changes.
• Develops a strong understanding of client objectives and assesses their business strategies and needs in relation to their objectives.
• Ensures effective ongoing communication with clients to maintain high levels of customer retention.
• Ensures team is providing quality ser