Position Overview:

The Director of Information Technology Security will be responsible for developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity and IT risk management program. The Director, IT Security will provide the vision and leadership necessary to manage the risk to the organization and will ensure business alignment, effective governance, system and product availability, integrity and confidentiality.

Essential Functions:

• Provides the direction for data and cybersecurity protection, and oversee Technology governance and policies.
• Develops security strategy, security awareness programs, security architecture, and security incident response.
• Provides strategic risk guidance for IT projects, including evaluation and recommendation of technical controls.
• Educates IT leaders on appropriate security risk and mitigation strategies
• Collaborates with IT and compliance team(s) as needed, and coordinates the IT component of both internal and external audits, federal and state examinations to ensure security programs are in compliance with relevant laws, regulations and policies.
• Develops, maintains and publishes up-to-date security policies, standards and guidelines. Oversees training and dissemination of security policies and practices.
• Evaluates new cybersecurity threats and IT trends and develops effective security controls. Oversees development of security awareness programs.
• Develops and oversees effective disaster recovery policies and standards to align with company business continuity management program goals.
• Coordinates development of implementation plans and procedures to ensure business critical services are recovered in the event of disasters or other incidents, and provides direction, support and in-house consulting in these areas.
• Evaluates potential security breaches, coordinates response, and recommends corrective actions.

Qualifications:

• Bachelor’s degree from an accredited institution, with degree preferred in Computer Science or Information technology systems security or related field. Master’s degree preferred.
• Minimum of 10 years of relevant experience in infrastructure security, security engineering, application security, identity & access management, security operations, software development, software and system architecture, or other relevant security experiences
• Must have recent heavy experience with AWS & DevSecOps
• Experience in establishing cybersecurity and risk metrics for reporting
• Strong Emotional Intelligence with demonstrated sustained leadership in a large organization involving multiple stakeholders.
• Demonstrated management skills, e.g., budget development and administration, policy development and implementation, personnel administration, staff training and development.
• Demonstrated ability to work with diverse people; effective oral and written communication skills.