Chief Information Security Officer

The Chief Information Security Officer, reporting to Chief Information Officer, is responsible for overseeing the planning, execution and management of cybersecurity and IT risk management programs. You'll drive improvements to the security program, lead auditing, drive security awareness across the organization, and partner with external security partners. You'll serve as an internal advisor on security and technology opportunities, manage both internal and external cybersecurity risk, and provide security awareness. You'll collaborate with business leaders to ensure proper security measures are implemented to protect the success of the business.

RESPONSIBILITIES:

• Evaluate the current landscape of security and business risks, assess critical needs, and define a comprehensive cyber strategy.
• Develop appropriate policies, procedures and guidelines to support a comprehensive cybersecurity strategy.
• Manage cybersecurity areas including incident response, patch management, vulnerability management, identity and access management, end point security, application security, cloud security, security awareness, business resilience, monitoring, remediation, threat intelligence, and information governance.
• Collaborate with other IT teams to identify the architecture and processes required to support ongoing digital developments and operations.
• Promote continuous improvements in IT Compliance to ensure all compliance (SOX,) and quality controls policies are achieved.
• Oversee a comprehensive risk management program with prioritization of risk and tracking of remediation efforts.
• Strengthen partner relationships with senior executives to create an environment to understand business security needs, promote cyber awareness and adoption, and build on changes in the cybersecurity threat landscape.
• Identify automation opportunities to increase productivity and efficiency.
• Deliver presentations to the executive leadership team and Board of Directors on a quarterly basis

Requirements

• Bachelor's degree, or equivalent experience, with a Certified Information Systems Security Professional certification
• 10+ years of relevant information security experience
• Experience across security technologies (such as intrusion detection and prevention, proxy filtering, advance malware protection, and threat intelligence), data integrity, technology architectures, and cloud technology stacks

• Technical experience developing cybersecurity posture and implement the strategy with a clear vision of the evolving needs and latest trends within cybersecurity, cloud, AI, platforms, security automation, etc.
• Proven large-scale crisis and incident response management and leading large project and program lifecycles.
• An inventive and experimental approach to solving problems and finding solutions.
• Experience assessing threat and vulnerability with a business and a technical perspective to shape affordable, efficient, and time-sensitive security architectures and solutions.
• Experience navigating complex relationships, frame complex issues, create important partnerships, influence, and develop solutions which result in mutually beneficial outcomes and align strategy decisions with business priorities.
• Success developing and leading teams and serving as a catalyst for growth and change.
• Strong problem solving and critical thinking skills - identifies and resolves problems in a timely and methodical manner; gathers and analyzes information thoroughly.
• Service-Oriented mindset - responds timely to users’ requests for service and assistance; meets commitments.
• Solid people and communication skills – focuses on solving conflict; maintains confidentiality.
• Teamwork - balances team and individual responsibilities; gives and welcomes feedback; contributes to building a positive team spirit.
• Ethics – treats people with respect; keeps commitments; works with integrity and ethically.
• Professionalism - approaches others in a tactful manner; treats others with respect and consideration regardless of their status or position; accepts responsibility for own actions.
• Organizational Support - follows policies and procedures; completes administrative tasks correctly and on time; supports organization's goals and values.
• Planning/Organizing – prioritizes and plans work activities; uses time efficiently; able to work independently.
• Quality - demonstrates accuracy and thoroughness.
• Adaptabilit