Information Security Director

The Information Technology (IT) Security Director is responsible for developing, implementing, and monitoring a strategic, comprehensive cybersecurity and IT risk management program. The IT Security Director will provide the vision and leadership necessary to manage the risk to the organization and will ensure business alignment, effective governance, system and product availability, integrity, and confidentiality.

• Develops, implements, and manages the company's cybersecurity strategy, policies, and procedures to protect against threats and vulnerabilities.
• Conducts regular cybersecurity risk assessments, identify vulnerabilities, and prioritize mitigation efforts.
• Recommends modifications to security protocols as required.
• Develops and/or provides training and guidance on acceptable use, risk management, incident response, and security protocols to employees.
• Reviews reports of, and evaluates response to, any security incidents.
• Oversee the continuous monitoring of network and system logs, intrusion detection, and other security-related data sources and ensure compliance with relevant cybersecurity regulations and standards.
• Evaluates new cybersecurity threats and IT trends and develops effective security controls. Oversees development of security awareness programs.
• Provides updates to leadership through the use of dashboards, routine reports, etc. regarding the current state of the security at the organization.
• Maintains current knowledge of industry and regulatory trends, and developments in system protection and IT security standards
• Oversees the security team including hiring suggestions and day to day management of daily operations.
• Organizes and directs the security incident response team (SIRT).

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or equivalent; Master’s degree preferred.
• 10+ years working in technology and at least three years focused on information security.
• Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) Certification preferred.
• Experience developing operational policies and procedures and knowledgeable about establishing cybersecurity and risk metrics for reporting.
• Strong knowledge of cybersecurity standards, regulations, and best practices, as well as cloud security best practices and tools.
• Experience developing and delivering security awareness training programs for employees.
• Proficiency with a broad array of security tools and applications.
• Demonstrated project management skills including organization, planning, time management and prioritization for self and team members.
• Ability to effectively manage change at the department and organizational level.
• Excellent communication and leadership skills.
• Strong analytical and problem-solving abilities.

Benefits

Health insurance; dental insurance; vision insurance; an employer funded profit-sharing plan with a 401(k) option (upon meeting eligibility requirements), group term life insurance, disability insurance, flexible spending accounts and a flexible time off and paid leave program.