CISO Director - Information Security

SUMMARY

The Director of Security is a strategic leader responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected.  This role will report directly to the VP-IT; CIO and will be responsible for directing staff in identifying, developing, implementing, and maintaining processes across the organization to reduce information and information technology (IT) risks, respond to incidents, establish appropriate standards and controls, manage security technologies, and direct the establishment and implementation of policies and procedures.  Leads Subaru's IT technological strategies in support of the company's mission and core objectives, providing leadership, vision, and management of IT Teams.  Ensures the effective operation of all IT systems and functions. Accountable for the management, mentoring, and career development of the IT staff members. 

 

PRIMARY RESPONSIBILITIES

Strategic Planning and Financial Oversight

• Develops and maintains a culture of security that emphasizes the enterprise-wide responsibility for ALL SOA employees. 
• Develops and maintains a comprehensive cloud security strategy aligned with the organization's overall security objectives and the larger organizational cloud strategy. 
• Assures the alignment of IT and business strategy with particular focus on thought leadership and innovation. Must be able to design and execute multi-year road maps in order to transform SOA environment and collaborate with SOA, SBR and Subaru entities for technological efficiencies. 
• Develops strategic annual and long-term business plans and operational budgets for responsible IT areas. 
• Tracks implementations to ensure financial and service targets are met according to timelines. 

Leadership and Operations Management

• Creates a security strategy and roadmap to drive the organization towards a more secure future. 
• Directs and manages IT Department activities and operations.  Leads multiple teams of various levels of employees and consultants through the prioritization and implementation of project-related activities. 
• Provides motivational career development and assessment of team members. 
• Fosters and encourages a diverse, inclusive team while encouraging proudly living out Subaru’s Love Promise. 

Service Delivery and Stakeholder Management

• Drives the incident response plan for the organization enrolling leadership to follow a well-rehearsed plan when a cyber event occurs.  
• Oversees and negotiates service level agreements with internal and external stakeholders. 
• Tracks service delivery to ensure agreed targets and standards are met. 
• Directs relationships with vendors and ensures that vendors meet SOA business objectives/objectives, SLAs, and deliverables in a timely manner and within budget guidelines. 
• Interacts with major suppliers, overseeing RFPs, bids, contracts, and service agreements. 

Project Planning and Resource Allocation

• Directs the design and implementation of security solutions that are secure, scalable, reliable, and cost-effective. 
• Determines the value and ROI of every IT-related project. Prioritizes the scheduling and implementation of major IT projects to ensure the efficient utilization of resources. 
• Identifies IT resources required to meet defined business objectives. 
• Develops and defends opportunities for continuous creative improvement of processes and systems. Acts as a change agent for new technologies and processes in the SOA environment. 
• Oversees the creation and maintenance of policies and procedures that protect the organization's computing infrastructure and data. 

Policy Development and Implementation

• Collaborates with Legal and Government Relations/Compliance teams to ensure compliance with relevant laws, regulations, and policies. 
• Advocates for changes in other departments' practices to ensure compliance with security policies. 
• Directs the planning, production, and implementation of information and for SOA technology-related systems policies, procedures, and regulations.

 

ADDITIONAL RESPONSIBILITIES

• Disseminates company changes and significant events to IT staff members, ensuring they are informed and engaged.  Fosters an inclusive environment for all team members. 
• Advocates for change initiatives and effectively leads the implementation of innovative ideas within the IT department and across the organization. 
• Enforces data trust and enablement security measures to protect the company's information. 
• Keeps abreast of emerging tec