Chief Information Security Officer

This role entails performing duties related to compliance certifications, continuous monitoring of controls and operational security administration, analysis of security-related incidents, vulnerabilities and events that may affect the organization and its clients.

• Provide compliance guidance to business units and product teams on cloud security offerings
• Support internal/external assessments for ISO 27001/9001, SOC 2, SOC 1, and regional requirements (e.g., IRAP) to support business growth
• Develop and maintain security operations processes & documentation (e.g., runbooks, operating procedures, cyber incident response)
• Maintain event collection environment through health monitoring and logs from firewalls, VPN, email protection, network analytics, access control cards system and CCTV
• Interact with various security products and platforms including: O365, MimeCast, WorkspaceOne, Fortinet, Cloud Hosting Providers (Azure, AWS) and others
• Provide support for implementation and maintenance of SIEM, DLP, endpoint protection, and other security tool alerts
• Provide hands-on input on vendor proposals and emerging security technologies and systems
• Coordinate, track and manage CEII compliance
• Provide technical expertise and support to IT management and staff in the implementation of security/protection technologies and network systems/applications
• Assist with penetration testing and vulnerability management efforts
• Participate in customer audits and respond to infosec questionnaires as part of the RFP process
• Participate in incident management activities which include associated investigations, ticket response, communications including periodic tabletop exercises.
• Assist in risk management, vendor management, and governance of information security policies across the organization
• Continuously improve our security practices and processes and keep company and customer data safe across services and infrastructure
• Design and build metrics and dashboards to track security incidents, vulnerabilities, risks, and awareness

Key Responsibilities:

1. Compliance guidance
2. Security operations
3. Event collection
4. Security interactions
5. SIEM/DLP implementation
6. Cybersecurity hand-ons
7. CEII compliance
8. Technical expertise
9. Penetration testing
10. Customer audits
11. Incident management
12. Risk management
13. Information security governance

Required Skills and Qualifications:

• Minimum 6 years of related experience in compliance and information security
• Well-versed in technologies like Windows, antivirus, data loss prevention (DLP)
• Must have experience in firewalls, cloud platforms, and content filtering solutions
• Must have experience in creating and maintaining security policy documents
• Good to have experience with regular vulnerability and web application scanning methodologies
• Crisis management (incident management) identification and reporting
• Network and cloud-based penetration testing experience required
• Incident response experience and prepare relevant security metrics dashboards
• 2-4 years' experience with firewall, network, antivirus, DLP, Azure, AWS, and desktop security administration
• Proficiency with security tools and platforms (e.g., SIEMs, vulnerability scanners, and malware analyzers)
• Familiarity with IDS/IPS systems and endpoint antivirus and EDR products
• Insider threat hunting and analysis
• 2 + years of professional experience focused on ITIL standards and practices
• Knowledge of current security standards, including ISO 27001, ISO 9001, SOC2, SOC 1, FERC, CEII, GDPR
• Ability to understand enterprise business computing operations/requirements, and cloud-based cybersecurity services
• Working knowledge DevOps concepts (e.g., infrastructure as code, deployment pipelines)
• Must have a general hands-on IT background with the capability and enthusiasm of delving into new technologies
• Must be willing to work in different time zones
• Good communication, presentation, documentation skills

Benefits:

• Excellent compensation package
• Opportunities for career growth and development
• Collaborative and dynamic work environment
• Recognition and rewards for outstanding performance