Director, IT Information Security, Risk and Resiliency

Our Fortune 500 company is driving a digital transformation and looking for forward-thinking innovators to disrupt how our industry thinks about and uses technology. As one of the world's leading employee benefits providers, we help millions of people gain affordable access to benefits that help them protect their families, their finances and their futures.

Are you an asker of questions, a solver of problems, and a challenger of the status quo? Our mission is to provide a differentiated customer experience and exceed the expectations people have of technology at any company — not just insurers. 

We are seeking individuals to join our team of talented IT professionals who share never-ending passion and an unwavering focus on our customer experience. Team members comfortable working in an agile, fast-paced, and delivery-focused environment thrive in our environment where we value an entrepreneurial spirit and those who challenge the status-quo.

Unum is changing, and we’re excited about what’s next. Join us.

General Summary:

This role leads a functional area within the Global Information Security Risk Management department. They are responsible for managing and leading a global team to partner in the design, deployment and maintenance of a global information security program that addresses Security Operations, Threat Intelligence, and Countermeasure needs and regulatory requirements for Unum Group and its partners. They work to develop and establish functional area standards and procedures. This role works with their team to implement and deliver new solutions to enable, enhance or transform security capabilities or services. This leader is instrumental in the implementation, monitoring, and strategy of the portfolio for their given function. They work with their manager, as well as business and IT partners to define delivery priorities in line with the technical, financial and people resources available. This leader works across the enterprise to develop business partner relationships, effectively communicate, and successfully execute IT plans in support of the agreed goals and objectives.

This is an in-office position available at the following locations: Chattanooga, TN; Atlanta GA; Portland ME

Job Specifications

· Bachelors degree in computer science, or relevant technical experience

· Has 8+ years’ experience in an IT field, or equivalent relevant work experience

· Prior management experience is required

· Demonstrates leadership in executing IT plans successfully that enable technical or business capabilities and address technology or business priorities

· Has strong understanding of Agile/Lean leadership principles

· Exhibits courage by taking smart risks and encouraging others to do so; empowers innovative approaches by motivating others to be proactive and resourceful

· Has proven and demonstrated knowledge and skills in one or more technologies or industries

· Able to apply broad business and technology understanding of internal and external trends and capabilities to ensure successful implementation of IT plans

· Able to communicate a compelling vision and need for change that generates excitement, enthusiasm and commitment to the process

· Demonstrates strategic and critical thinking capability

· Interacts with others, internally and externally, in a way that gives them confidence in their intentions and those of the organization

· Understands the business case for each deliverable undertaken and works with their manager and product owner to help ensure benefits are realized

· Has strong planning, communication and presentation skills, and the capability to listen and influence

· Has in-depth knowledge of regulations, including, GLPA, HIPAA, GDPR, CCPA, and other cyber security regulatory compliance requirements and related programs

· Has in-depth knowledge of security and control frameworks such as NIST Cyber Security Framework; ISO 17799/27001, CobIT and ITIL

· CISSP, CISM, CISA, SANS, and other security related certifications a plus

Technical Skills for Identity & Access Management

· Experience with LDAP/Directory Services including Active Directory

· Experience with Azure, O365 and AWS

· Familiar with regulations, including, GLPA, HIPAA, GDPR, CCPA, and other cyber security regulatory compliance requirements and related programs

· Familiar with ISO 27001/27002, and the NIST Cyber Security Framework

Technical Skills for Cyber Security

· Excellent working knowledge of one or more of the following security areas:

· Operating System Security (Windows, Apple, AIX, Linux, zOS)

· Internet Technologies (NNTP, Proxy, HTTP, HTTPS, HTLM, SSL, X.5