Director, Information Security & Business Systems

Company Description

Scaled Agile, Inc., (SAI) helps enterprises thrive in a world of change with SAFe, the most trusted system for learning and practicing agile ways of working. Together, SAFe Studio and the Scaled Agile Framework provide everything individuals and teams need to link evolving strategy and execution. SAFe works by building a culture of resiliency that engages employees and focuses on customers so organizations can work with agility. Backed by a global network of partners and community of professionals, SAFe promotes collaboration so today’s leaders can build a better future.

Based in Boulder, Colorado, SAI is a member of the Pledge 1% corporate philanthropy movement. Through this program, SAI contributes to the local community and seeks to inspire and encourage other companies to the same purpose.

Job Description

Overview
Scaled Agile, Inc. is seeking an experienced Director of Information Security & Business Systems to lead the team responsible for our information security & corporate business systems.

You will work cross-functionally to advise, plan, and execute Scaled Agile’s information security program to enhance information security, ensure compliance with applicable privacy laws (e.g. GDPR, CPRA, etc), as well as ensure our business systems provide an exceptional user experience for our staff.  This position will serve as a company and customer subject matter expert for cybersecurity, collaborating with our CTO and fractional vCISO.

What this role will do:

• Serve as the senior internal information security advisor and subject matter expert to the organization on security and related initiatives.
• Manage a security and compliance program including but not limited to: 3rd party certifications (e.g. SOC2), incident management, business continuity, risk management.
• Implement, enforce, and maintain information security program, policies and procedures
• Develop strategies to promote information security awareness training to the organization.
• Oversee information security audits, whether performed by the organization or third-party personnel.
• Assess current and prospective technology for vulnerabilities, weaknesses and possible improvements.
• Review contractual language regarding security and technology topics for prospective & existing customers, vendors, etc.. Collaborate with cross functional stakeholders (e.g. legal, sales, engineering) on relevant topics.
• Engage with customers and vendors on security assessments, develop timelines for remediations or other actions identified.
• Establish the priorities for a team of security analysts and system administrators aligned to key business priorities, using Scrum, Kanban, or other appropriate methodologies.
• Cultivate a culture of security and privacy.
• Advocate a practical approach to information security that aligns to business value.

Qualifications

What You’ll Bring to the Role:

• Bachelor's degree in Information Systems, or a related field
• 7 + years of information security work experience
• Deep familiarity with industry standards such as NIST and CIS frameworks
• Experience with SOC 2 audits preferred
• Proven leadership experience including both internal staff and external partners.
• Strong knowledge in security controls for  cloud-based infrastructure
• Excellent project management skills and strong ability to prioritize
• Excellent verbal and written communication skills
• CISSP certification is optimal but not required
• Experience working in a software product company preferred
• Client-facing experience is desirable
• Experience working with fractional vCISOs is highly desirable
• Experience applying SAFe, Lean, and Agile methodologies highly preferred

Additional Information

Where you’ll be working:

We proudly support a collaborative remote environment for our globally distributed teammates, while also using our Boulder office as a resource. #LI-Remote

Compensation:

Scaled Agile is committed to fair and equitable compensation practices. The target salary range for this role is $165,000-$190,000. Final compensation for this role will be determined by various factors such as a candidate's relevant work experience, skills, and certifications.

Employees of Scaled Agile are also compensated with a competitive benefits package including medical, dental, vision, optional insurance products including identity protection and pet insurance, 401K with a match, flexible paid time off, company-paid sabbatical after six years