Chief Information Security Officer

• Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program
• Work directly with the business units to facilitate risk assessment and risk management processes
• Develop and enhance an information security management framework
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services
• Provide leadership to the enterprise's information security organization
• Partner with business stakeholders across the company to raise awareness of risk management concerns
• Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems
• Guide technical development of security tools and product features in order to reduce security risk across the company
• Prepare and report on our information security posture and status to Senior Management and the Board
• Create quarterly, annual and long-term cyber security and cyber risk management goals, articulate strategies, define metrics, and provide necessary updates to executive leadership and the Board of Directors
  

Qualifications

To qualify, you must have

• Degree in business administration or a technology-related field required.
• Professional security management certification
• Minimum of 10-12 years of experience in a combination of risk management, information security and IT jobs
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST.Excellent written and verbal communication skills and high level of personal integrity
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
• Experience with contract and vendor negotiations and management including managed services.
• Specific experience in Agile (scaled) software development or other best in class development practices.
• Experience with Cloud computing/Elastic computing across virtualized environments.
• Demonstrated experience representing an organization’s information security program in presentations and discussions with customers, partners, and other external parties
• Experience implementing cloud security technologies, including encryption, network security, intrusion detection, cloud monitoring, and digital forensics
• Experience implementing cloud security technologies, including encryption, network security, intrusion detection, cloud monitoring, and digital forensics
• Demonstrated experience with Application Security, DevOps, or Cloud Security functions as a leader or in a people management role
• Proven track record and experience in developing information security policies and procedures, as well as successfully executing programs
• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and non-technical audiences