Overview

Unison is seeking a VP of Information Security responsible for establishing the information security strategy for the organization and directs the implementation and monitoring of information security standards and policies. This position is also responsible for continuing to mature the cyber security program at Unison, tasked with protecting the company from external and internal threats while ensuring Unison meets the requirements of domestic compliance regimes, including FEDRAMP. Reporting to the Chief Technology Officer, this position is a key member of the Technology leadership team and has decision-making authority on information security standards and implementations as well as security oversight of technology operations, product development, and corporate systems.

Responsibilities

• Formulating and leading a team to continue to implement a comprehensive cybersecurity strategy that protects Unison.
• Ensuring that all company software, process, procedures, computer architecture and application code are properly designed and maintained to ensure company security and/or compliance standards.
• Achieve and maintain FedRAMP.
• Educating and communicating to key stakeholders’ new threats, industry trends, and applicable laws related to security through reports, presentations and key metrics.
• Identifying and mitigating security incidents, compliance issues, Unison security team operational inefficiencies, application vulnerabilities, network/infrastructure and other vulnerabilities. www.onpartners.com
• Identifying software/tools that can increase Unisons’ security posture and/or threat intelligence.
• Managing security incidents and events to protect users and data assets, including intellectual property, regulated data and the company's reputation.
• Managing larger security projects with globally distributed cross-functional teams.
• Influencing company culture to be one of security and compliance awareness with security being a key criterion for decisions and process changes.

Qualifications

• 10+ information security technology leadership experience across a broad range of technical environments and business models.

• Knowledge of and experience with FedRAMP, SOC1, SOC2 and/or ISO compliance.

• Experiences need to include active partnering with software development leadership regarding safe and thoughtful software development practices.
• Multiple years of experience specifically developing and managing risk-based security programs leveraging a wide variety of cyber security technologies.
• As an Information Security leader your history must include communicating security-related technology and risk-related concepts to a broad range of technical and non-technical leaders and staff.
• You must have extensive knowledge and experience with information security standards, policies and practices.

Education

Bachelor’s degree or equivalent experience is required. An MBA or other advance degree is a plus.