Asst VP, Chief Information Security Officer

Responsibilities

• Build the network and communicate the vision: Lead and communicate strategic security plans to achieve business goals by prioritizing defense initiatives and coordinating the evaluation, deployment, and management of current and future security technologies using a risk-based assessment methodology.
• Provides clear risk mitigating directives for projects and plans as it relates to IT projects and controls.
• Provides regular reporting on the status of the information security program to enterprise risk, senior business leaders and the board of Directors for Encore part of strategic enterprise risk program in order to drive assurance.
• Work closely with the IT department on corporate technology development to fully secure information, computer, network, and processing systems.
• Aid the IT organization and broader enterprise with maintaining compliance with such security frameworks as PCI DSS, ISO 27001, and SOX / COBIT.
• Establish Governance and Build Knowledge: Own all assurance & information security governance activities related to the integrity and confidentiality of customer, business partner, employee, and business information in compliance with the organization's information security policies.
• Leverage the Infosec LT and other governance boards and steering committees to ensure compliance.
• Lead the organization: Develop, track, and control the security services annual operating and capital budgets for purchasing, staffing, and operations.
• Communicate security strategies and plans to executive team, staff, partners, customers, and stakeholders.
• Promote and oversee strategic security relationships between internal resources and external entities, including government, vendors, and partner organizations.
• Operate the function: Report security performance against established security metrics and key risk indicators. This includes managing and containing information security incidents and events to protect corporate IT assets, intellectual property, regulated data, and the company's reputation.
• Develop the Frameworks: Recommend and implement changes in security policies and practices and training in accordance with changes in local or federal law. Maintain and oversee enforcement of these policies and practices.
• Perform other duties, as assigned.

Requirements

• Evidence of success in this role will be the successful implementation of an InfoSec Roadmap and Strategy, NIST CSF alignment, and developing and leading a strong InfoSec team across the globe, wherein they have as a leader-built trust both internally, with the board and senior leaders regarding the InfoSec program.

Qualifications

• Education: Bachelor's
• Field of Study: Information Security/Technology or equivalent experience
• Experience: Must have 15+ years of experience in a combination of risk management, information security and senior IT roles, managing and/or directing an IT and/or security operation. At least four must be in an executive leadership role. Experience in planning, organizing, and developing IT security.
• Certification(s): The ideal candidate will be certified or seeking the following professional certifications: CISA, CISM, CISSP, CEH, or additional technical security certifications.