Director CISO

Please Note: This role is with one of our Series-B funded portfolio organizations.

Role description:

The Chief Information Security Officer(CISO) plays an integral part in defining the fundamental principles for protecting information resources and the proper controls needed to ensure compliance with internal and external regulations while supporting business needs. The Chief Information Security Officer will be accountable for overseeing all the Information Security policies in place and determining the security controls that are appropriate to the level of risk associated with IT systems leveraged to support customer services.

Key responsibilities

• Develop, manage, and improve a comprehensive information security risk-based program to ensure information assets integrity, confidentiality, and availability.
• Build a results-driven organization for monitoring, analyzing, and reporting on all network and application communication-specific protocols for the unwanted manipulation of systems, malicious network traffic, network attacks against vulnerable services, data-driven attacks on applications, host-based attacks, or unauthorized access to sensitive data.
• Accountable experience overseeing the creation of a cyber-threat management and prevention architecture which have proven to provide sound, reliable, robust performance for a 24x7x365 organization. security applications and network infrastructure to provide security configurations, controls for user accounts, monitoring of services, centralized logging, network connectivity, job scheduling, and routine maintenance.
• Oversight of resources for auditing of applications, operating systems, and networks to provide a measurable technical assessment that includes interviewing staff personnel, performing security vulnerability scans, reviewing access controls, or analyzing physical access to ensure availability, confidentiality, and integrity to help the organization meet internal and external regulatory compliance.

Candidate experience requirements/Abilities

• Bachelors degree in Information Security, Computer Science, Management of Information Systems, or related field required.
• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM).
• High level of personal integrity and the ability to professionally handle confidential matters and show appropriate judgment and maturity.
• Minimum 8 years experience with Security and Compliance management and oversight of a Security program with applications, complex networks, and operating systems in large enterprise organizations.
• Security experience must be in a complex, high-value cyber target industry and organization.
• Works independently as well as collaboratively with minimal professional and managerial supervision.