(USA) Director, Information Security

Position Summary...

Director Information Security - Strategy

What you'll do...

Managing Functional Partnerships : Requires knowledge of: Stakeholder identification and mapping; Stakeholder analysis; Stakeholdercommunication; Stakeholder engagement techniques; Stakeholder management effectiveness tools and methods; Fluency in many specializedbusiness vernacular; Deep understanding of diverse markets to deliver customer and business value; adapt style and best practices to accommodatecultural differences. To build and maintain collaborative and strategic alliances with a wide range of partners across the business and industry;leverage their support to drive business programs & priorities. Create an environment that supports collaboration with people from different functionsand have different technical viewpoints. Provide insights on the impact of cross functional team collaboration on achieving strategic goals. Supportcolleagues and stakeholders to develop their understanding of technology, business and performance to identify solutions to deliver improvedservices, solutions and relationships.
Cyber Risk Management: Requires knowledge of: Cyber risk assessment and management techniques; Security risks, threats and vulnerabilities;Possible treatments of security risks, threats and vulnerabilities; Evolving security landscape and emerging cyber security threats; Assessment ofpotential business risks from security gaps. To guide the development of cyber risk assessment and/or management techniques. Pre-empt risks,vulnerabilities and threats across organization policies, processes and defenses. Evaluates effectiveness of current cyber risk assessmenttechniques. Directs improvements or modifications to vulnerability assessment techniques in view of emerging security risks and threats. Leads theimplementation of cyber risk assessment activities throughout organization, ensuring alignment with organization's policies and principles. Analyzescybersecurity gaps identified and project business risk and impact to the organization. Evaluates options and decide on suitable treatment of cyberrisks, threats and vulnerabilities.
Cyber Security Audit : Requires knowledge of: Audit methodologies and tools; Audit interpretation and analysis; Non-compliance with regulatoryrequirements; Internal and external compliance and regulatory guidelines; New and emerging technologies pertinent to cyber audits; Cloud, IoT,hardware; Containers; Virtualization. To provide resolutions for complex information technology management risks and issues. Oversees cost-benefitanalyses of various audit and control tools and techniques. Develops procedures for the verification and validation of financial transactions.Supervises the use of all audit and control tools, techniques, and practices. Coaches team members on the process of conducting quality reviews andaudits. Monitors the implementation of best practices.
Security Domain Acumen : Requires knowledge of: Competitive landscapes; Existing enterprise systems and technologies; Domain-specific marketstandards; Relevant technologies and environments; Domain-specific methodologies, tools, and processes. To demonstrate a deep understanding ofvarious principles, ways of working, and terminologies across a domain. Compares and contrasts the latest developments and emerging trends andissues in a domain. Identifies areas of innovation within a domain while understanding downstream impacts on the subdomains.
Risk and Security Governance : Requires knowledge of: Organizational risks and security operational procedures; Risk and security gap analysis;Security threats and system vulnerabilities; Corporate risk and security policies; Security frameworks; Implementation processes and considerationsfor security policies and pr