Head of Information Security

Full job description

Job Overview

We are seeking a highly skilled Information Technology Specialist to join our Associated Spring team. This role is responsible for managing and maintaining the organization's IT infrastructure, ensuring that all systems are secure, efficient, and aligned with our business goals. The ideal candidate will have experience in IT infrastructure, network administration, and technical support.

Responsibilities:

• Develop and implement an enterprise-wide information security strategy and roadmap aligned with business objectives and regulatory requirements.
• Establish and enforce information security policies, standards, and procedures to mitigate risks and safeguard data assets.
• Conduct regular risk assessments and vulnerability scans to identify security threats and vulnerabilities and develop mitigation strategies.
• Design and manage security controls and mechanisms to protect the organization's IT infrastructure, systems, and data from unauthorized access, misuse, or modification.
• Monitor and analyze security incidents and breaches, and coordinate incident response and recovery efforts in collaboration with relevant stakeholders.
• Provide leadership and guidance to the information security team, fostering a culture of continuous improvement and professional development.
• Collaborate with other IT and business functions to integrate security requirements into system development lifecycles and business processes.
• Stay abreast of emerging threats, vulnerabilities, and industry best practices to proactively address security risks and enhance the organization's security posture.
• Lead compliance efforts to ensure adherence to relevant regulatory requirements and industry standards (e.g., GDPR, HIPAA, ISO 27001).

Qualifications

• Bachelor's degree in computer science, information security, or a related field.
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification preferred.
• 5 – 10 years of experience in information security management, with a proven track record of developing and implementing effective security strategies and controls.
• Deep understanding of information security principles, standards, and best practices, with experience in risk management, threat intelligence, and incident response.
• Experience with change management process.
• Strong leadership and communication skills, with the ability to effectively collaborate and influence stakeholders at all levels of the organization.
• Experience managing security compliance efforts and working with regulatory requirements such as GDPR, HIPAA, and ISO 27001.
• Knowledge of emerging technologies and trends in information security, including cloud security, mobile security, and IoT security.
• Ability to thrive in a fast-paced, dynamic environment and adapt to evolving business and technology landscapes.
• Commitment to continuous learning and professional development in the field of information security.

Job Type: Full-time

Pay: $85,000.00 - $115,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Compensation package:

• Bonus opportunities

Experience level:

• 5 years

Schedule:

• Monday to Friday

Experience:

• Management: 5 years (Preferred)

Work Location: Remote

If you require alternative methods of application or screening, you must approach the employer directly to request this as Indeed is not responsible for the employer's application process.