Job Details

5+ years direct interaction with compliance/audit activities;

10+ years of information technology/security experience;

5+ years of experience in Information Security in large organizations;

Demonstrated management/ leadership of elevated responsibility in a fast paced, high priority environment;

Strong communication skills both verbal and written;

Ability to work with complex, cross-functional teams in a highly matrixed environment;

Working experience with industry frameworks (CSF, ISO, COBIT, etc.)

Experience with a broad range of security technologies, including NextGen Firewalls, DLP, NAC, IDS/ IPS, IdAM, Certificate Management, SIEM, Endpoint Protection, Anti-malware, vulnerability management.

CISSP certifications preferred;

Financial industry background within compliance preferred;

Prior experience with SaaS security operations;

Prior experience with Cloud / SaaS / IaaS environments and related security solutions;

Knowledge of Business Resiliency practices;

Experience in migrating enterprise companies from traditional data center infrastructure, application and data designs to hybrid or fully-cloud enabled practices;

Experience researching and evaluating impacts of new technologies;

Experience working within an international environment;

Experience with Unix/ Linux and Windows system administration;

Well-rounded background in network, host, database, and application security;

Professional IT Accreditations (CISM, CCSA, CCSE, CCNA, CISSP).

Establishes, maintains and provides strategic direction of security engineering and compliance planning and support to the company, and leadership and direction to the hosted operations IT team;

Lead the development of an application security plan leveraging the Building Security In Maturity Model (BSIMM);

Consults with Security and Technology Architects, internal IT operations and business operations to determine environment, application and systems requirements in accordance with security policies;

Researches and evaluates current and future technologies for use in building, maintaining, and enhancing the security solutions;

Lead the development of an application security plan leveraging the Building Security In Maturity Model (BSIMM);

Plans, directs and executes strategic roadmap of security initiatives;

Lead and manage information security resources, including the security team, vendors, and contractors;

Develop organization's processes and procedures for operational efficiency including automation and self-service models;

Opex, Capital, and Budgetary Expense estimation and planning;

Significant contributor to defining and delivering the IT security architecture, framework, roadmap and patterns;

Responsible for delivering security solution design and engineering, prioritized to reflect the threat and vulnerability landscape;

Serve as an expert advisor in the development, implementation, and maintenance of information security policy and control framework;

Work closely with business units, CTO, Chief Architects, and CIO organizations on architecture;

Work with business units and functional groups to review offerings, create threat models, and provide guidance on remediation;

Develop and execute Threat and Vulnerability Assessments as part of the security design and solution engineering process;

Monitor developments in the information security industry including vendor strategies and communicate on the potential impact on or applicability to the organization;

Build rapport, credibility, and cohesion across all business unit teams and IT teams in the course of leading the projects;

Oversee highly complex projects with high visibility and high impact;

Strong leadership skill driven both from business and security perspectives to deliver security solutions;

Proof of Concept and Pilot of Solutions.