Cybersecurity Leader

Cybersecurity Leader

Position Summary:

   The Cybersecurity Leader is senior-level and oversees and drives the organization’s overall cybersecurity. This role supervises all aspects of IT security, including design, development, implementation, incident response, budgets, and adherence to various regulations. The Cybersecurity Director contributes to the overall cybersecurity strategy by identifying growth opportunities based on the latest threats, managing security personnel and reporting on the company’s cybersecurity posture.

Essential Functions:

• Create and execute security strategies to increase the efficiency of IT systems and projects at the organization.
• Directing crisis management by investigating the cause of a breach and implementing the correct solutions.
•  Allocating the correct resources to ensure that staff are delivering secure solutions.
• Managing the cybersecurity teams and/or individual contributors within the organization.
• Overseeing vulnerability audits, penetration tests, and forensic IT investigations, ensuring that outcomes are understood and applied.
• Overseeing Corrective Actions and Preventative Actions when gaps are identified
• Liaising with other senior-level leaders and the executive board to ensure that new systems align with the organization’s security policies and data protection strategies.
• Ensuring that all staff security training and compliance efforts are current.
• Preparing budgetary allocations and financial forecasts relating to cybersecurity.
• Managing partners, stakeholders, vendors, and third-party solutions providers
• Embed compliance culture and risk awareness across the company
• Provide off-hours support if required
• Performs other duties as may be assigned.

Essential:

• Broad technical knowledge of information security and compliance principles and process
• Experience in operating, monitoring, and implementing security policies, standards, and controls
• Overseeing external audit activity and supporting internal audits
• Knowledge of core security controls and systems such as risk analysis quantification
• Ability to write new policies and programs
• Vulnerability management
• Project
• Strong written and verbal communication skills
• Strong analytical and critical thinking skills
• The highest degree of personal integrity.

Training, Education, and Experience

• Bachelor’s degree in computer science, Information Technology, or equivalent experience preferred 15 or more

 years of professional networking experience, including 10 or more years of security management

 and/or compliance.

• Professional certification, such as CISA, CISM, CRISC, CISSP, or ISAAP
• Cloud Security, Risk Management
• NIST
• Governance
• ISO leadership is a must
• HIPAA
• GDPR
• SOC leadership is a must

Reports To:

• CEO