Director, Information Security

About AvePoint

Beyond Secure. AvePoint is the global leader in data security, governance, and resilience, going beyond traditional solutions to ensure a robust data foundation and enable organizations everywhere to collaborate with confidence. Over 25,000 customers worldwide rely on the AvePoint Confidence Platform to prepare, secure, and optimize their critical data across Microsoft, Google, Salesforce, and other collaboration environments. AvePoint’s global channel partner program includes approximately 5,000 managed service providers, value-added resellers, and systems integrators, with our solutions available in more than 100 cloud marketplaces. To learn more, visit www.avepoint.com.

At AvePoint, we are committed to investing in our people. Agility, passion and teamwork set us up to do our best work and foster a culture where you are empowered to craft your career, make an impact, and own (y)our future. Unleash the power of you!

Overview: You will help implement and drive initiatives, programs, and projects to raise their game in Information Security and Risk Management. You are pragmatic, operational, and practical in your understanding of risk and security, but also have a business minded approach. You’re comfortable collaborating and innovate with other teams within AvePoint to achieve Company goals.

Key Responsibilities

• Manage and lead a team of security and privacy professionals, providing guidance, mentorship, and performance evaluations.
• Collaborate with the CISO/CPO and senior leadership to develop and execute strategic plans for security and privacy initiatives
• Implement AvePoint’s comprehensive information security and privacy strategy to protect the organization’s information assets and ensure compliance with relevant regulations.
• Partner with our sales organization on PSR matters, with the ability to balance closing deals with the Company’s PSR requirements.
• Oversee the day-to-day operations of the information security and privacy program, including monitoring and responding to security incidents.
• Operationalize activities around certifications, audits, and risk management initiatives to ensure compliance with standards such as GDPR, CCPA, PCI, FISMA, and SOX.
• Support internal privacy and security team deliverables, continuously improving content in response to feedback from customers and colleagues.
• Update documentation to keep current with frequent regulatory and programmatic changes.
• Create effective technical communications in a variety of media.
• Actively participate in cross-functional teams, representing the PSR team function.
• Oversee incident response and management, ensuring timely and effective resolution of security and privacy incidents.
• Stay up to date with the latest trends and developments in security and privacy and implement best practices within the organization.
• Coordinate with other departments to ensure security and privacy measures are integrated into all business processes.
• Prepare and present reports on security and privacy metrics to senior management.
  
  

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, or a related field. A master's degree is preferred.
• At least 10 years of experience in information security and privacy, with a minimum of 5 years in a leadership role.
• Strong background in writing with excellent editing and proofreading skills.
• Solid understanding of networking and computer hardware.
• Strong interest in privacy and cyber security.
• Relevant certifications, such as CIPP, CISSP, CISM, or CISA, are highly desirable.
  
  

Skills

• Strategic thinking and problem-solving abilities.
• Strong understanding of security technologies and best practices.
• Ability to work collaboratively with cross-functional teams.
• Excellent analytical and decision-making skills.
• Strong project management skills.
  
  

AvePoint is proud to employ talent from many different backgrounds, experiences, and identities. We believe that diversity and inclusion drive our success and is at the core of how we hire, communicate, and collaborate to deliver value and excellence. We are committed to fostering an environment where people can bring their whole selves to work and feel a sense of belonging, and we continue to work toward creating a workforce that represents the diversity of our customers and communities.

Any personal data you share with us during the application process will be processed strictly in compliance with applicable data protection laws and our Privacy Notice.