Director, IT Security

About the Company:

Headquartered in Santa Ana California, Veros (www.veros.com) is a growing technology company that develops, operates and maintains custom software and business analytic solutions for the financial services industry. We are looking for a self-motivated, independent person to play a critical role, supporting the company’s end user technology needs.

Veros offers a unique opportunity that encourages creativity and professional growth along with a competitive salary and benefits package including medical, dental, vision, life, 401(k), paid vacation, holidays, and more. 

Position Summary:

Reporting to the Senior Vice President of Information Technology, the primary objective of this position is to maintain a secure, high-performance, and robust computing environment. The responsibilities of the role specifically include IBM’s Identity and Access Management (IAM) stack and managing all aspects of cybersecurity of the public-facing production technology infrastructure, including both primary and backup data centers, as well as internal production and development systems. The Director of IT Security is also responsible for forward-looking Cloud security architecture, security operations and maintenance of an effective systems and resource monitoring program.

Principal Responsibilities:

• Lead IT Security team and provide hands-on support for all IBM Tivoli Security Identity and Access manager, and IT security tasks and initiatives 
• Lead and review the design, development, and automation of Cloud security architecture on internal/external systems with various cloud providers (such as Azure and AWS)
• 10+ years of progressive “hands-on” security experience in security tools and programs and successfully executing security initiatives across the organization
• Proactively monitor Veros’ infrastructure for security breaches, take appropriate action to mitigate risks, implement cybersecurity measures to protect data, and provide root cause analysis for security incidents
• Design, maintain and practice disaster recovery and business continuity strategies 
• Lead the team to meet security, contractual, and compliance/audit requirements
• Lead the application vulnerability assessment, third party risk assessments, audits, and due diligence
• Implement security controls and frameworks including CIS, DISA/STIG, NIST SP 800-53, FISMA compliance, and FEDRAMP certification

Cybersecurity:

• Develop and execute IT Security plan with focus to secure systems, performance management, and software update/upgrades 
• Design and lead the development and implementation of enterprise cloud and hybrid cloud architecture
• Work with data analytics and product teams to choose appropriate technology solutions and complete integration into company’s on-prem environment
• Evaluate and report on cloud product and service provider security and compliance during vendor selection and solution architecture
• Demonstrate strong understanding of concepts including monitoring, encryption, data security, IAM and auditing with industry standard best practices of operational security control
• SME and technical lead for Internal Certificate Authority and PKI implementation
• Work closely with the development team to review existing applications and system enhancements to ensure protection against the OWASP Top 10 and other common security vulnerabilities
• Provide recommendations for security enhancements to IT executive management

Identity and Access Management (IAM):

• Install, configure, update, upgrade, administer, and support IBM Tivoli suite of products i.e., SIM, SAM, SFIM, SAM E-SSO, SDS, and/or SDI and other IAM solutions
• Successfully troubleshoot integrations, configure policies, workflows, and access controls
• Understand high availability concepts, load balancers, clustering, and firewalls
• Interpret requirements and assist in producing solution designs in the areas of administration process and user provisioning, identification and authentication, authorization, identity centralization/directory services, federation, single sign on, and compliance reporting
• Work closely with software architects to design and develop product enhancements related to the integration with the IAM platform
• Develop custom monitoring solutions for specific components as required
• Develop and maintain effective systems automation procedures using shell scripting
• Lead disaster recovery event with switchover, validation, and switchback 

Qualifications and Requirements:

• Bachelo