Head of Global Security, Risk and Compliance

7 days ago


Schiller Park, United States ActiveCampaign Full time

We are seeking an experienced Head of Security Engineering to join our growing SaaS company. Reporting to the CTO, you will be responsible for defining, executing and overseeing a holistic security strategy to safeguard our organizations digital assets, protect customer data, and maintain trust in our brand. You will lead a team of security professionals and drive collaboration with engineering, product, and cross-functional stakeholders to integrate security across all aspects of our operations, aligning with business objectives and industry standards. What your day could consist of: Define and lead product security initiatives in close connection to the needs of partners, customers, the market and overall company objectives. Lead a team of security professionals, including hiring, training, and performance management. Lead incident response efforts operating as the incident commander, coordinating with relevant stakeholders to resolve security incidents while communicating effectively throughout. Lead the IT team. Manage Third Party (e.g., vendor) Risk Assessment Program with IT. Manage stakeholder (customer, partner) security questionnaires and assessment processes. Interface with customer management as necessary. Manage threat and vulnerability management. Ensure an effective SSDLC is in place for engineering. Implement security controls and processes to protect the company's data and systems from external threats. Own the SOC2 audit, and lead work to implement ISO27001 certification. Conduct risk assessments and implement appropriate controls to mitigate identified risks. Stay up to date with the latest security technologies and best practices. Develop and maintain security policies, standards, and procedures. Develop and lead comprehensive security training programs across the organization to ensure all employees understand and adhere to security best practices, fostering a culture of proactive risk awareness and protection. Guide security engineering on InfoSec/AppSec standards, auditing, and penetration testing. Manage analysis of fraud vulnerabilities, control weaknesses, and gaps to mitigate and remediate significant issues, trends, and loss events. What is needed: Bachelor's degree in computer science, information technology, or a related field. 10 years of experience in information security, with at least 5 years in a senior leadership role. Expert in security technologies and best practices. Experience with security risk assessment and management. Experience with incident response and forensics. Experience with security in the cloud (e.g., AWS) is required. CISSP, CISM, CISA or other relevant security certification is a plus. Excellent communication and leadership skills. Experience building Internal Audit functions for SOC 2, ISO 27001, and PCI-DSS. Excellent understanding of vulnerability management and associated tools and solutions. Machine Learning Models understanding is a plus. Prior penetration testing experience is a plus. About ActiveCampaign: ActiveCampaign helps small teams power big businesses with the must-have platform for intelligent marketing automation. Customers from over 170 countries depend on ActiveCampaigns mix of pre-built automations and integrations (including Facebook, Google, WordPress, Salesforce, Shopify, and Square) to power personalized marketing, transactional emails, and one-to-one CRM interactions throughout the customer lifecycle. As a global multicultural company, we are proud of our inclusive culture which embraces diverse voices, backgrounds, and perspectives. We dont just celebrate our differences, we believe our diversity is what empowers our innovation and success. ActiveCampaign holds the highest customer satisfaction rating among Marketing Automation, E-Commerce Personalization, Landing Page Builders, and CRM solutions on G2.com and is one of only a handful of software solutions with over 10,000 positive reviews. ActiveCampaign has also been named the Top Rated Email Marketing Software on TrustRadius. Learn more and start your free trial at ActiveCampaign.com. Perks and benefits: ActiveCampaign is an employee-first culture. We take care of our employees at work and outside of work. You can see more of the details here, but some of our most popular benefits include: -Comprehensive health and wellness benefits that includes a High Deductible Health Plan (HDHP) fully covered by ActiveCampaign, complimentary access to telehealth and tele-mental health resources, and a complimentary membership to Calm. -Open paid time off. -Generous 401(k) matching program with immediate vesting. -Quarterly Path Perks with options for commuter and lunch benefits (for those reporting to a Hub), or a remote home office stipend. -Access to professional development resources through LinkedIn Learning. -After five years of service, youll be eligible for a four-week paid sabbatical leave and a sabbatical leave bonus. ActiveCampaign is an equal opportunity employer. We recruit, hire, pay, grow and promote no matter of gender, race, color, sexual orientation, religion, age, protected veteran status, physical and mental abilities, or any other identities protected by law. Our Employee Resource Groups (ERGs) strive to foster a diverse inclusive environment by supporting each other, building a strong sense of belonging, and creating opportunities for mentorship and professional growth for their members. J-18808-Ljbffr



  • Schiller Park, United States Midwest Startups Full time

    We are seeking an experienced Head of Security Engineering to join our growing SaaS company. Reporting to the CTO, you will be responsible for defining, executing and overseeing a holistic security strategy to safeguard our organizations digital assets, protect customer data, and maintain trust in our brand. You will lead a team of security professionals and...


  • Schiller Park, United States ActiveCampaign Full time

    We are seeking an experienced Head of Security Engineering to join our growing SaaS company. Reporting to the CTO, you will be responsible for defining, executing and overseeing a holistic security strategy to safeguard our organizations digital assets, protect customer data, and maintain trust in our brand. You will lead a team of security professionals and...

  • Sr IT Risk

    4 days ago


    Schiller Park, United States Javen Technologies Full time

    Job Title: Sr. IT Risk & Compliance Analyst Location: Chicago, IL Duration: 12 Months Contract Onsite/Hybrid Role Required: Risk & Compliance ANalyst, Certifications, CISA, Risk, Compliance, Control testing Job Description: Responsibilities will include but are not limited to: • Collaborate with IT personnel to understand operational processes to identify...


  • Abbott Park, United States Abbott Laboratories Full time

    About AbbottAs a global healthcare leader, Abbott is dedicated to helping people live more fully at all stages of life. With a diverse portfolio of life-changing technologies, we serve people in over 160 countries.We're revolutionizing the way people manage their health, particularly those with diabetes, by providing accurate data to drive better-informed...


  • cedar park, United States Insight Global Full time

    RELOCATION AVAILABLECedar Park, TX4 days in office (1 remote day, not Monday or Friday) Required Skills & Experience - Bachelor's Degree in Computer Science, Information Systems, or a related field.- Minimum of 5 years of IT experience, with a strong emphasis on cybersecurity and compliance within cloud environment.- Relevant security certifications such as...


  • cedar park, United States Insight Global Full time

    RELOCATION AVAILABLECedar Park, TX4 days in office (1 remote day, not Monday or Friday) Required Skills & Experience - Bachelor's Degree in Computer Science, Information Systems, or a related field.- Minimum of 5 years of IT experience, with a strong emphasis on cybersecurity and compliance within cloud environment.- Relevant security certifications such as...


  • Cedar Park, United States Insight Global Full time

    RELOCATION AVAILABLECedar Park, TX4 days in office (1 remote day, not Monday or Friday) Required Skills & Experience - Bachelor's Degree in Computer Science, Information Systems, or a related field.- Minimum of 5 years of IT experience, with a strong emphasis on cybersecurity and compliance within cloud environment.- Relevant security certifications such as...


  • Overland Park, United States TEKsystems Full time

    Job DescriptionJob DescriptionLocation: Overland Park, KS (On site 2 – 3 days a week, must be vaxxed)Duration: 6 months contract to hire Top Skills' Details:3+ years of technical security and/or compliance experience supporting audit documentation, control validation and/or operationExperience with risk management tools (ServiceNow [preferred],...


  • Schiller Park, United States The LaSalle Group Full time

    LaSalle Network is partnering with a leading global professional services firm providing a broad range of risk, retirement and health solutions to find a SOX Compliance and Internal Controls Consultant to join their team. With a network of over 50,000 colleagues in 120 countries, they empower results for clients by using proprietary data and analytics to...


  • Cedar Park, TX, United States Insight Global Full time

    RELOCATION AVAILABLECedar Park, TX4 days in office (1 remote day, not Monday or Friday) Required Skills & Experience - Bachelor's Degree in Computer Science, Information Systems, or a related field.- Minimum of 5 years of IT experience, with a strong emphasis on cybersecurity and compliance within cloud environment.- Relevant security certifications such as...


  • Schiller Park, United States Keeper Security Full time

    Keeper is hiring a talented Communications Specialist to join our Global Communications team. This is a 100% remote position with an opportunity to work a hybrid schedule for candidates based in the Chicago, IL metro area. Keepers cybersecurity software is trusted by millions of people and thousands of organizations globally. Keeper is published in 21...


  • Abbott Park, United States Abbott Laboratories Full time

    About Abbott LaboratoriesAt Abbott, we are a global healthcare leader dedicated to helping people live more fully at all stages of life. Our diverse portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals, and branded generic medicines.We're revolutionizing...


  • Schiller Park, United States The Options Clearing Corporation Full time

    This position is not eligible for sponsorship. What You'll Do: This role will support independent assessments of OCC's financial and operational business processes, risk management, and other objectives as needed. The role is responsible for determining the sufficiency of management's controls and activities related to the management of regulatory,...

  • Chief Risk

    1 week ago


    Schiller Park, United States Northern Trust Full time

    About Northern Trust: Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889. Northern Trust is proud to provide innovative financial services and guidance to the worlds most successful individuals, families, and institutions by remaining true to our enduring...

  • Chief Risk

    1 week ago


    Schiller Park, United States Northern Trust Full time

    About Northern Trust: Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889. Northern Trust is proud to provide innovative financial services and guidance to the worlds most successful individuals, families, and institutions by remaining true to our enduring...


  • Cedar Park, TX, United States Insight Global Full time

    RELOCATION AVAILABLECedar Park, TX4 days in office (1 remote day, not Monday or Friday)Required Skills & ExperienceBachelor's Degree in Computer Science, Information Systems, or a related field.Minimum of 5 years of IT experience, with a strong emphasis on cybersecurity and compliance within cloud environment.Relevant security certifications such as CISSP...


  • Schiller Park, United States CrossCountry Consulting Full time

    From the beginning, our goal was to establish an advisory firm that stands apart from the rest - one that is grounded in our Core Values and dedicated to creating a positive experience not just for our clients, but for our people too. We firmly believe in the strength of collaboration, enthusiasm, generosity, and perseverance as the driving forces behind our...

  • Senior, Safety

    3 weeks ago


    College Park, United States Valvoline Global Full time

    Why Valvoline Global Operations? Valvoline Global is a worldwide leader in automotive and industrial solutions, creating future-ready products and best-in-class services for partners around the globe. Established in 1866, we introduced the world’s first branded motor oil, claiming our position as The Original Motor Oil. As an affiliate of Aramco, one of...


  • Menlo Park, United States Global Risk Solutions, Inc. Part time $35 - $55

    Job ID: R-CA-1002Job Title: Armed Executive Protection AgentLocation: Menlo Park, CAPay Rate: $35-55 per hourJob Type: Reserve Agent, Upon AvailabilityJob Requirements:Experience: Minimum of 6 years of experience in executive protection or a related field.       Licenses:BSIS Guard CardBSIS Exposed Firearms PermitConcealed Weapons Permit...


  • Schiller Park, United States Request Technology Full time

    Senior Python Developer - Market Risk Salary: $90k-$100k bonus Location: Chicago, IL Hybrid: 3 days onsite, 2 days remote We are unable to provide sponsorship for this role Qualifications Bachelor's Degree in Finance or related. Proficient understanding of statistical concepts, derivatives pricing, securities markets and options trading strategies. 2 years...