What are the responsibilities and job description for the DIRECTOR OF SECURITY & CRISIS MANAGEMENT position at MedXpress Connect?
**Position Summary:**
MedXpress Connect is seeking a highly experienced Director of Security & Crisis Management with expertise in investigating security breaches related to intellectual property systems, procurement processes, and crisis management. This individual will be responsible for ensuring the protection of company assets and developing strategies to mitigate risks.
**Key Responsibilities:**
- Lead investigations into security breaches involving intellectual property systems and implement countermeasures.
- Develop and enforce security protocols and procurement processes to prevent unauthorized access to company assets.
- Monitor and assess risks related to IT systems, intellectual property, and procurement vulnerabilities.
- Establish crisis management frameworks, including preparation, response, and recovery plans for potential security threats.
- Ensure compliance with state, federal, and industry regulations related to cybersecurity, data protection, and procurement.
- Provide regular reports to senior leadership on security status, risks, and mitigation strategies.
- Liaise with external stakeholders, including legal teams and government agencies, during crisis situations or security breaches.
- Train internal teams on best practices in security and crisis response protocols.
**Qualifications:**
- Proven experience in cybersecurity with a focus on intellectual property systems and procurement security.
- Strong background in crisis management, with experience developing and executing risk mitigation strategies.
- Bachelor's degree in Cybersecurity, Information Technology, or a related field (Master’s preferred).
- Certifications such as CISSP, CISM, or equivalent are highly desirable.
- Excellent communication skills, with the ability to present complex security matters to non-technical stakeholders.
- Familiarity with industry regulations and standards, including HIPAA ,GDPR, and ISO