Senior Manager of Information Security

About Bazaarvoice At Bazaarvoice, we create smart shopping experiences. Through our expansive global network, product-passionate community & enterprise technology, we connect thousands of brands and retailers with billions of consumers. Our solutions enable brands to connect with consumers and collect valuable user-generated content, at an unprecedented scale. This content achieves global reach by leveraging our extensive and ever-expanding retail, social & search syndication network. And we make it easy for brands & retailers to gain valuable business insights from real-time consumer feedback with intuitive tools and dashboards. The result is smarter shopping: loyal customers, increased sales, and improved products. The problem we are trying to solve : Brands and retailers struggle to make real connections with consumers. It's a challenge to deliver trustworthy and inspiring content in the moments that matter most during the discovery and purchase cycle. The result? Time and money spent on content that doesn't attract new consumers, convert them, or earn their long-term loyalty. Our brand promise : closing the gap between brands and consumers. Founded in 2005, Bazaarvoice is headquartered in Austin, Texas with offices in North America, Europe, Asia and Australia.  It’s official: Bazaarvoice is a Great Place to Work in the US , Australia, India, Lithuania, and the UK!
As the Senior Manager of Information Security, you will play a vital role in the organisation and should have experience in many facets of information security. You should have an acute, big-picture-oriented mindset and an ability to make higher-level decisions while having the requisite skills to lead a strong team of security experts who are trusted to handle hands-on activities within security. You should possess strong interpersonal and communication skills as a key part of this position, and will be working closely with business and functional leaders to coordinate various security initiatives.

Essential Duties and Responsibilities:

• Implement the strategy for new technologies and information security products that will support information security requirements for the company and its customers, business partners, and vendors and establish the strategy to mitigate information security risks within the organisation.
• Collaborate closely with senior-level technology leaders to develop and plan the information security architecture strategy.
• Create, update, and improve upon key performance indicators gauging the company's level of security and provide reports to leadership.
• Define, develop, and implement data security standards including data classification, encryption, data loss prevention, data access governance for structured and unstructured data and monitoring to prevent data-related security incidents.
• Oversee and perform IT security risk assessments.
• Lead ongoing threat and vulnerability assessments and substantive testing of information security controls.
• Serve as the escalation point and information security expert for solution designs and technical consulting services.
• Maintain strong oversight of third parties and business partners to safeguard against undue risk.
• Direct complex information security principles and requirements into business initiatives that securely drive innovation, improve customer experience, and control costs.
• Other duties as assigned.

Education and Experience Necessary for the Role:

• Bachelor’s degree in Computer Science, Information Systems, or related field required.
• 5+ years’ experience in Information Security engineering/architecture.
• 2+ years of IT security leadership.
• 10+ years progressive work experience in information technology security roles and relevant certifications will be considered in lieu of formal education.
• Experience in the use of security principles; risk assessment policies and standards; information security best practices, products and technologies; and network technologies.
• Experience with endpoint security software and encryption products.
• Hands-on experience with securing cloud hosted, complex SaaS applications.
• Experience designing, implementing and operating log management and SIEM reporting tools and reporting/analysis development.
• Security implementation project experience to include Cloud Services, IAM, Encryption, PKI, Vulnerabilit