Director of Information Security
Boston, MA
Job Type: Direct Hire | Recruiter: Doug Newcomb | Phone: 617.831.1809
Location: Andover, MA (Onsite)
Length: Direct Hire
Job Description:
Our client is seeking an experienced Director of Information Security to work under the direction of the IT Leadership team and the CFO. The Director of Information Security will provide technical oversight of the organization's information security technology portfolio and program. The Director of Information Security will identify and spearhead security initiatives, supervising IT security engineering staff, and actively promoting a culture of information security throughout the company. The Director of Information Security serves as both a technologist and a Subject Matter Expert (SME) for all information security platforms, advancing the organization's information security architecture, auditing security policies and procedures, and investigating security events.
Essential Duties and Responsibilities (but not limited to):
- Develop, implement, and monitor a strategic enterprise information security and IT risk management program.
- Oversee the installation, configuration, and monitoring of new information security technologies.
- Ensure cross-department collaboration to install, monitor, and effectively operate security processes, procedures, and tools.
- Coordinate business continuity planning efforts and conduct regular technical risk assessments and audits.
- Establish a cyber security governance framework and manage service levels with security managed services providers.
- Monitor regulatory compliance with enterprise security policies and educate business leaders on compliance efforts.
- Set usage and security policies for internal and external platforms.
- Oversee the administration of all information security technology platforms.
- Manage the IT security organization, including hiring, training, and performance management.
- Liaise with corporate compliance, audit, legal, and HR management teams as required.
- Develop, maintain, and publish up-to-date security policies, standards, and guidelines.
- Lead information security programs such as awareness campaigns, vulnerability management, and risk management.
- Engage proactively in risk management activities and promote a culture of information security across all business and technology groups.
- Bachelor’s or Master’s degree in Information Technology, Computer Science, Engineering, or related field.
- 3+ years of supervisory experience leading a security team.
- Knowledge of national and international regulatory compliances and frameworks (i.e., NIST, SOX, HIPAA, GDPR, and DFARs).
- In-depth knowledge of applications, systems, network, and data security.
- 10+ years of full-time experience in technical information security roles.
- Background in information technology with expertise in networking, programming, database management, or systems administration.
- Experience with incident analysis and response concepts and techniques.
- Strong knowledge of security technologies including IDS and IPS, firewalls, and host-based security.
- Familiarity with a variety of technologies including Microsoft, Cisco, Unix and Linux, EMC, and mobile devices.
- Certification such as CISA, CISM, CISSP, or similar is preferred.
- Ability to travel up to 20% of the time.
- A Secret Clearance without incident or the ability to acquire a security clearance is required.
- Candidates must be a United States Citizen.
Come see why DPC has achieved:
- 4.9/5 Star Glassdoor rating and the only staffing company (< 1000 employees) to be voted in the national Top 10 ‘Employee’s Choice - Best Places to Work’ by Glassdoor.
- Voted ‘Best Staffing Firm to Temp/Contract For’ six times by Staffing Industry Analysts as well as a ‘Best Company to Work For’ by Forbes, Fortune and Inc. magazine.
www.LoveYourJob.com