Director of IT and Security

Description

About Us 

eSimplicity is modern digital services company that delivers innovative federal and commercial IT solutions designed to improve the health and lives of millions of Americans while defending our national interests. Our solutions and services improve healthcare for 100+ million Americans, protect our borders, and defend our country by supporting and innovating with the Air Force, Space Force, and Navy. Our team of 300+ engineers, designers and strategists relentlessly challenge the status quos, build consensus and collaborate to deliver new solutions with an unwavering focus on the user experience from start to finish. 

eSimplicity is seeking a Director of IT and Security who is responsible for leading eSimplicity’s Security strategy on Corporate and Programs while also responsible for ensuring the success of the Corporate IT Operations team (GCC and Unclassified Environments) strategy, roadmap and operations. Champions and may lead implementing security tools, security tool usage, ensuring tools remain compliant and configured properly, setting program policy best practices all the while ensuring a successful program ATO across all eSimplicity programs. The Director of IT and Security provides oversight and is the subject matter expert to lower-level Security personnel. The Director of IT and Security is responsible for ensuring Corporate and IT Operation systems and procedures safeguard internal information systems, networks, databases, and Web-based assets while meeting high-levels of community satisfaction. 

Responsibilities: 

• Leads the Corporate IT Operations and Security day-to-day vision, roadmap, and strategies. 
• Leads the Security Operations Best Practices and meets with security personnel across eSimplicity programs to ensure consisten corporate-to-program security visionary leadership. 
• May lead/ensure or conduct vulnerability assessments and monitors systems, networks, databases and Web-based assets for potential system breaches. Recommends and takes the lead on implementing changes to enhance security systems and prevent unauthorized access.  
• Responds or leads teams that address and respond to day-to-day corporate IT activities and alerts from information technology tools. Reports, investigates, and resolves higher level security/system incidents.   
• Responds or leads teams to respond to security tool outages, degradations in service, tune security rules and alerts, and setup/maintain security tool dashboards and reporting.  
• Research and strategize security trends, new methods, and techniques used in unauthorized access of data in order to preemptively eliminate the possibility of system breach. Ensures compliance with regulations and privacy laws.  
• Educates and communicates security requirements and procedures to all users and new employees.  
• Encourages and enables program strategy for continuous security practice and designs all security and privacy policies across an entire large-scale program.  
• Ensures (and engages with other Security SME’s) a continuous security training curricula and culture is used across the eSimplicity corporate and programs to elevate a security mindset across the team.  
• Applies iterative security automation to all program aspects increasing overall security posture iteratively and never accepts the status quo.  
• Responsible for program Security and Privacy strategies across all teams. Ensures a consistent approach and management across the program.  
• Leads/Coaches our Corporate and Client facing security staff and security best practices. Leads security practices with a vision be it for business development, client facing, or corporate needs.  
• Leader will mentor, coach and establish Security and Privacy best practices used across all delivery programs.  
• Leader will participate in business development activities, technical challenges and contribute to technical business development responses. 
• Advances automation and AI to bring efficiencies to all areas of responsibility and throughout their organization. 

Requirements

Required Qualifications:  

• A bachelor's degree in computer science, Information Systems, Engineering, Business, or other related scientific or technical discipline. With ten years of general information technology experience and at least four years of specialized experience, a degree is not required.  
• Expert in setting program level security strategy (Privacy and Security Policies)  
• Technical conceptual knowledge of cloud architectures/services (AWS, Microsoft & Google), Datacentric systems, Application Engineering,DataOps,DevSecOps andMLOps  
• Understands continuous automated security practices applied to a variety of technical contexts  <