Information Security Team Manager

Security Questionnaire Manager Role

Job Description:

We are seeking an experienced Client Security Questionnaires & Audit Manager to join our Information Security team.

This role is critical in managing client security questionnaires, coordinating audits, and ensuring compliance with industry standards and regulations.

The successful candidate will be a self-starter with strong security knowledge and excellent communication skills, capable of managing multiple projects in a fast-paced environment.

Key Responsibilities:

1. Establish and Maintain Repository of Standardized Security Questionnaire Responses: Develop and implement a comprehensive repository for storing and managing client security questionnaire responses.
2. Manage Timely and Accurate Responses to Client Security Questionnaires: Collaborate with internal teams to gather documentation and ensure timely and accurate responses to client security questionnaires.
3. Collaborate with Internal Teams (IT, Legal, InfoSec): Work closely with IT, Legal, and InfoSec teams to gather documentation and respond to client inquiries.
4. Serve as Primary Point of Contact for Clients: Provide exceptional customer service and serve as the primary point of contact for clients regarding security-related inquiries.

Audit Coordination & Management:

1. Lead and Coordinate Client and Internal Audits: Oversee and coordinate client and internal audits for compliance assessment (ISO 27001, HIPAA, etc.).
2. Serve as Liaison Between Organization and External Auditors/Clients: Establish and maintain effective relationships with external auditors and clients.
3. Prepare Comprehensive Evidence Packages for Security Audits: Develop and prepare comprehensive evidence packages for security audits.
4. Collaborate with Teams to Design Mitigation Strategies: Work with teams to design mitigation strategies for identified risks.
5. Work with Control Owners to Create and Implement Corrective Action Plans: Collaborate with control owners to create and implement corrective action plans.

Contract & Insurance Management:

1. Create Security Terms and Conditions for Contract Inclusion: Develop and implement security terms and conditions for contract inclusion.
2. Review MSA Security Terms and Provide Feedback: Review MSA security terms and provide feedback to the legal team.
3. Respond to Cyber Insurance Questionnaires: Respond to cyber insurance questionnaires based on implemented controls and certifications.

Process Improvement & Stakeholder Engagement:

1. Identify Opportunities to Improve Efficiency: Analyze and identify opportunities to improve efficiency of questionnaire responses and audit processes.
2. Develop Templates and Workflows: Develop templates and workflows to streamline client questionnaire completion.
3. Engage with Clients and Third-Party Auditors: Engage with clients and third-party auditors regarding organizational security posture.
4. Communicate Effectively with Internal Stakeholders and Senior Leadership: Provide regular updates and communicate effectively with internal stakeholders and senior leadership.
5. Provide Recommendations to Management: Provide recommendations to management for security practice improvements.

Required Skills and Qualifications:

• 10+ Years of Experience in Information Security: Proven experience in information security with a focus on audit management.
• Bachelor's Degree in Information Security or Related Field: A bachelor's degree in information security or a related field (or equivalent work experience).
• Certifications (Preferred): CISA, CRISC, CISM, or CISSP certification.

Benefits:

• Opportunity to Work Directly with CISO Office: Collaborate closely with the CISO office and contribute to organizational security initiatives.
• Cross-Functional Collaboration: Work across multiple teams, including IT, Legal, and Compliance.
• Strategic Role in Organizational Security Posture: Play a key role in shaping the organization's security posture.
• Fast-Paced, Dynamic Work Environment: Join a dynamic and fast-paced environment with opportunities for growth and development.

If you have the experience and passion for audit management and client relations in the cybersecurity space, we encourage you to apply.

---