Senior Director, Information Security – Compliance Program

JOB SUMMARY:   

The Sr. Director, Global Information Security (GIS) Compliance Program is a key member of the GIS leadership team responsible for the enterprise alignment to our cyber regulatory and/or settlement agreements. They will lead an organization that coordinates tactical efforts across the company to provide visibility into our Information Security Program to settlement agreement, monitoring a portfolio of projects needed to maintain compliance.   This includes the management testing of the Information Security Program, monitoring and reporting of compliance to the provisions, driving actions needed to maintain compliance and adhere to the obligations. Ensures executive awareness and compliance through management of program KPI/KRIs to ensure that we are adhering to order obligations.    

CANDIDATE PROFILE   

Required: 

• Bachelor's degree in Cybersecurity, Business Administration or a related field or equivalent experience. 

• 10+ years of leadership experience in Information Technology and/or Consulting including:  

• 5+ years of experience managing complex, multifunctional technology or security initiatives 

• 5+ years of experience in portfolio or program management and governance reporting at executive levels  

• Prior experience with compliance programs and/or government or legal compliance requirements 

• Ability to influence others, including those at senior organizational levels 

Preferred: 

• Graduate/post graduate degree or legal degree preferred 

• Exceptional portfolio or program management competence and skills 

• Excellent verbal and written communication skills with the ability to articulate complex ideas in easy to understand business terms 

• Ability to distribute, assign and ensure completion of work throughout various teams without direct management authority 

• Strong analytical skills for planning, estimating, budgeting and monitoring program/project work 

• Ability to form and foster high performing teams  

• Ability to accomplish results through others, particularly by establishing relationships and effective controls  

• Strong negotiating, influencing and problem resolution skills 

• Proven ability to effectively prioritize and execute tasks in a high-pressure environment 

• Project Management Professional (PMP) certification, portfolio or similar certifications. 

CORE WORK ACTIVITIES   

Information Security Compliance and Settlement Program Leadership  

• Reporting and Management of portfolio of projects or remediations linked to regulatory commitments needed to maintain compliance to the Settlement agreement 

• Manage testing of ISP controls.  Provide results that can serve settlement purposes. 

• Work with teams to standardize processes for monitoring, metrics and reporting for compliance efforts for regulatory commitments. 

• Provide visibility to the settlement program and activities to leadership.   Raise and mitigate risks to compliance to the regulatory commitments. 

• Ensure compliance activities are aligned or integrated as much as possible with the Information Security Program & processes and Risk Assessments. 

• Develop and lead a high functioning team that leverages program management expertise, best practices and analytics to m