What are the responsibilities and job description for the Director, Global Information Security position at Alvarez & Marsal?
Description
The Director of Information Security Governance, Risk and Compliance (GRC) will oversee and coordinate the company’s GRC activities in relation to information security, reporting directly to the Chief Security Officer and leading a global team responsible for risk management and corporate compliance. The scope of this role carries direct responsibility for global compliance policies, processes, and standards. The role will align the Security GRC program with corporate objectives and address all aspects of the information security management system.
Additional Information
Principal Duties and Responsibilities:
The salary range is $180,000- $200,000 annually, dependent on several variables including but not limited to education, experience, skills, and geography. In addition, A&M offers a discretionary bonus program which is based on a number of factors, including individual and firm performance. Please ask your recruiter for details.
Regular employees working 30 or more hours per week are also entitled to participate in Alvarez & Marsal Holdings’ fringe benefits consisting of healthcare plans, flexible spending and savings accounts, life, AD&D, and disability coverages at rates determined from time to time as well as a 401(k)-retirement plan. Provided the eligibility requirements are met, employees will also receive a discretionary contribution to their 401(k) from Alvarez & Marsal. Additionally, employees are eligible for paid time off including vacation, personal days, seventy-two (72) hours of sick time (prorated for part time employees), ten federal holidays, one floating holiday, and parental leave. The amount of vacation and personal days available varies based on tenure and role type. Click here for more information regarding A&M’s benefits programs.
Diversity & Inclusion
A&M’s entrepreneurial culture celebrates independent thinkers and doers who can positively impact our clients and shape our industry. The collaborative environment and engaging work—guided by A&M’s core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity—are the main reasons our people love working at A&M. Inclusive Diversity means we embrace diversity, and we foster inclusiveness, encouraging everyone to bring their whole self to work each day. It runs through how we recruit, develop employees, conduct business, support clients, and partner with vendors. It is the A&M way.
Equal Opportunity Employer
It is Alvarez & Marsal’s practice to provide and promote equal opportunity in employment, compensation, and other terms and conditions of employment without discrimination because of race, color, creed, religion, national origin, ancestry, citizenship status, sex or gender, gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, family medical history, genetic information or other protected medical condition, political affiliation, or any other characteristic protected by and in accordance with applicable laws. Employees and Applicants can find A&M policy statements and additional information by region here.
Unsolicited Resumes from Third-Party Recruiters
Please note that as per A&M policy, we do not accept unsolicited resumes from third-party recruiters unless such recruiters are engaged to provide candidates for a specified opening and in alignment with our Inclusive Diversity values. Any employment agency, person or entity that submits an unsolicited resume does so with the understanding that A&M will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.
The Director of Information Security Governance, Risk and Compliance (GRC) will oversee and coordinate the company’s GRC activities in relation to information security, reporting directly to the Chief Security Officer and leading a global team responsible for risk management and corporate compliance. The scope of this role carries direct responsibility for global compliance policies, processes, and standards. The role will align the Security GRC program with corporate objectives and address all aspects of the information security management system.
Additional Information
Principal Duties and Responsibilities:
- Support the Head of Information Security to define and drive the GRC Security Strategy.
- Collaborate to define, implement, and administer company GRC policies and guidelines, and ensure their consistency with other relevant statutes, policies, and guidelines.
- Provide guidance and work with process owners to identify and remediate control weaknesses to ensure compliance with client and regulatory requirements.
- Monitor the regulatory and statutory landscape for information security issues, keeping senior leadership apprised of any relevant developments impacting the organizations business goals and objectives, and recommending appropriate courses of action as needed.
- Oversee and direct GRC team contributions
- Oversee information security risk assessment activities and direct response actions in a timely manner that is consistent with regulatory, and contractual obligations.
- Lead internal team that is responsible for providing responses to security requirements in customer contract security clauses, RFPs, and audits.
- Lead internal team that is responsible for performing and coordinating third-party risk assessments.
- Lead ongoing security training and awareness program.
- Oversee continuing implementation and maintenance of an information security framework (ISO2007:2022).
- Assist and advise on the development of the annual audit plan in partnership with Internal Audit.
- Contribute to the annual information security risk assessment process and perform roadmap projects for Management as assigned.
- Work directly with Privacy Counsel to ensure company adherence to data privacy and data governance requirements.
- Manage and develop teams’ knowledge on GRC and data privacy matters.
- Advise on GRC matters and recommend courses of action to the Chief Security Officer.
- BS in Computer Science, Information Systems, Cybersecurity, or related field
- 10 years’ experience in an information security environment
- 5 years’ supervisory or management experience
- Strong experience with Governance, Risk and Compliance for controls and policy, IT Control self-assessment and measurement, remediation and exception management, reporting and advanced IT security risk evaluation and compliance dashboard
- Governance, Risk and Compliance leadership experience in a multi-national is strongly preferred
- Experience with data security and privacy legislation, including GDPR, FINRA, SEC and similar regulations or statutes, and ability to leverage other internal/external resources with knowhow in dealing with data protection laws and requirements
- Expertise with information security standards and frameworks including but not limited to ISO27001, NIST, SANS, Cyber Essentials and CMMC.
- Demonstrated expertise and leadership in risk frameworks
- Strong background in contract negotiations, particularly legal language regarding audits, compliance, and security provisions
- Certification as a CISSP, CISA, or other GIAC or related certification(s) desired
- Project management experience desirable
- Technology experience in a variety of IT environments
- Demonstrated experience in data analysis using known data tools or software to perform queries
The salary range is $180,000- $200,000 annually, dependent on several variables including but not limited to education, experience, skills, and geography. In addition, A&M offers a discretionary bonus program which is based on a number of factors, including individual and firm performance. Please ask your recruiter for details.
Regular employees working 30 or more hours per week are also entitled to participate in Alvarez & Marsal Holdings’ fringe benefits consisting of healthcare plans, flexible spending and savings accounts, life, AD&D, and disability coverages at rates determined from time to time as well as a 401(k)-retirement plan. Provided the eligibility requirements are met, employees will also receive a discretionary contribution to their 401(k) from Alvarez & Marsal. Additionally, employees are eligible for paid time off including vacation, personal days, seventy-two (72) hours of sick time (prorated for part time employees), ten federal holidays, one floating holiday, and parental leave. The amount of vacation and personal days available varies based on tenure and role type. Click here for more information regarding A&M’s benefits programs.
Diversity & Inclusion
A&M’s entrepreneurial culture celebrates independent thinkers and doers who can positively impact our clients and shape our industry. The collaborative environment and engaging work—guided by A&M’s core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity—are the main reasons our people love working at A&M. Inclusive Diversity means we embrace diversity, and we foster inclusiveness, encouraging everyone to bring their whole self to work each day. It runs through how we recruit, develop employees, conduct business, support clients, and partner with vendors. It is the A&M way.
Equal Opportunity Employer
It is Alvarez & Marsal’s practice to provide and promote equal opportunity in employment, compensation, and other terms and conditions of employment without discrimination because of race, color, creed, religion, national origin, ancestry, citizenship status, sex or gender, gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, family medical history, genetic information or other protected medical condition, political affiliation, or any other characteristic protected by and in accordance with applicable laws. Employees and Applicants can find A&M policy statements and additional information by region here.
Unsolicited Resumes from Third-Party Recruiters
Please note that as per A&M policy, we do not accept unsolicited resumes from third-party recruiters unless such recruiters are engaged to provide candidates for a specified opening and in alignment with our Inclusive Diversity values. Any employment agency, person or entity that submits an unsolicited resume does so with the understanding that A&M will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.
Salary : $180,000 - $200,000
