Information Security Director

executive

EngineeringSecurity

0 views0 saves0 applied

Quick Summary

Requirements Summary

Three years professional experience designing, implementing and managing enterprise IT security Thorough understanding of IT security and privacy laws, regulations and compliance, including forensics,

Technical Tools

EngineeringSecurity

Director, Information Security

The successful candidate for this position will be a highly motivated, proven self-starter with a thorough understanding of the diverse aspects of information security. The Director of IT Security is responsible for the following:

Comprehend and enforce applicable laws, regulations and compliance relating to IT security and privacy, working closely with the Legal
Design and implementation of security policy and procedures
Work directly with others in the IT department to maintain and proactively monitor core infrastructure components, including products from Cisco, Oracle, MS Windows, and servers running versions of Linux/Unix operating systems
Lead security assessments of systems, applications and networks in a complex IT environment
Make relevant recommendations for products and procedures to maintain and improve IT security
Lead security incident response
Work in the evaluation of current and future applications and network devices
Handling sensitive, confidential data
Act as liaison with entire company to promote, educate, and ensure compliance of IT security

Requirements:

Three years professional experience designing, implementing and managing enterprise IT security
Thorough understanding of IT security and privacy laws, regulations and compliance, including forensics, SOX, PCI and HIPAA. SAS70, eDiscovery or COBIT/ISO experience highly desirable.
Perform or work with others to execute security assessments of technical environments
Ability to communicate effectively, both in writing and speech, as well as being able to prepare and present IT related material to a wide variety of audiences, including non-technical executives and management and on occasion, to large groups
Successful project management experience
Understanding of concepts relating to Identity Management
Ability to coordinate incident response with many internal and external organizations including IT, legal, internal audit, operations, executive management and local and federal authorities as needed
Experience developing, reviewing, administering, and implementing security policies
B.A. or B.S required, advanced degree preferred
Experience within the outsourced (BPO) Contact Center Experience would be ideal

CERTIFICATIONS: Security certifications such as Certified Information Systems Security Professional (CISSP(ISC2)), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Global Information Assurance Certification, GIAC Information Security Officer (GISO), and/or GIAC Security Essentials Certification (GSEC).