Information Security Director

Director, Information Security

The successful candidate for this position will be a highly motivated, proven self-starter with a thorough understanding of the diverse aspects of information security. The Director of IT Security is responsible for the following:

• Comprehend and enforce applicable laws, regulations and compliance relating to IT security and privacy, working closely with the Legal
• Design and implementation of security policy and procedures
• Work directly with others in the IT department to maintain and proactively monitor core infrastructure components, including products from Cisco, Oracle, MS Windows, and servers running versions of Linux/Unix operating systems
• Lead security assessments of systems, applications and networks in a complex IT environment
• Make relevant recommendations for products and procedures to maintain and improve IT security
• Lead security incident response
• Work in the evaluation of current and future applications and network devices
• Handling sensitive, confidential data
• Act as liaison with entire company to promote, educate, and ensure compliance of IT security

Requirements:

• Three years professional experience designing, implementing and managing enterprise IT security
• Thorough understanding of IT security and privacy laws, regulations and compliance, including forensics, SOX, PCI and HIPAA. SAS70, eDiscovery or COBIT/ISO experience highly desirable.
• Perform or work with others to execute security assessments of technical environments
• Ability to communicate effectively, both in writing and speech, as well as being able to prepare and present IT related material to a wide variety of audiences, including non-technical executives and management and on occasion, to large groups
• Successful project management experience
• Understanding of concepts relating to Identity Management
• Ability to coordinate incident response with many internal and external organizations including IT, legal, internal audit, operations, executive management and local and federal authorities as needed
• Experience developing, reviewing, administering, and implementing security policies
• B.A. or B.S required, advanced degree preferred
• Experience within the outsourced (BPO) Contact Center Experience would be ideal

CERTIFICATIONS: Security certifications such as Certified Information Systems Security Professional (CISSP(ISC2)), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Global Information Assurance Certification, GIAC Information Security Officer (GISO), and/or GIAC Security Essentials Certification (GSEC).