Chief Information Security Officer (CISO)
Reporting to the CIO, the Chief Information Security Officer (CISO) is a key role on the
leadership team of the IT department. This position is responsible for the security
of data and information assets. This role has purview over the operational day-to-day measures used to secure data, applications and infrastructure.
This role also owns the strategic
initiatives undertaken to continually enhance information security posture.
The CISO will be responsible and accountable for the successful implementation of
well-defined security related projects, and the operational practices related to
information security.
Description of Duties and Tasks
1. Leading and successfully completing projects aimed at improving
security posture with minimal supervision. Success means full scope of work
completed on time, within budget and aligned with established acceptance criteria.
2. Building out and maintaining an information security team that is able to satisfy the
cybersecurity needs
3. Mitigating risks associated with data breaches and data leaks.
4. Establishing, maintaining and continuously testing infrastructure aimed at
operational recovery from outages related to cybersecurity incidents.
5. Continual testing of the environment for security vulnerabilities.
6. Staying current on risks and trends in the world of cybersecurity and reporting on
such to the leadership team.
7. Providing overall day-to-day direction to a team of information security
professionals and 3rd party providers.
8. Contributing to the development of the technology roadmap.
9. Partnering with peers, both within and outside of the IT department to accomplish
shared goals.
10. Defining goals for the teams reporting to the CISO based on the goals of the
broader IT organization.
11. Ensuring team goals are met and work is successfully completed (teams are meeting
established operational targets)
12. Defining the operating model for the information security team using the ITIL
framework and ITSM tools.
13. Reporting data in various formats showing the performance of the information
security team and making recommendations for changes / improvements as needed
to enhance performance.
14. Providing leadership and coaching for InfoSec team members as needed.
15. Establishing and managing relationships with 3rd party product and service
providers as needed to accomplish defined goals.
16. Acting as technical sponsor for all projects within your areas of responsibility.
17. Ensuring information security project requirements, scope, budgets and timelines
are well-defined.
18. Ensuring security projects are well-managed and are being executed as per
established expectations.
19. Administrative aspects of people management for the InfoSec team including, but
not limited to absence approval, performance management, hiring and termination.
20. Managing the operating budget for the InfoSec team as well as budgets for
cybersecurity related projects.
21. Establishing and / or maturing formal standards and practices in the following areas :
a. Identity & Access Management (IAM)
b. Secure data capture
c. Secure data storage, transfer and retrieval
d. Data security policy development, training and risk management
22. Other related duties as assigned.
Knowledge
Strong working knowledge of various data security frameworks, including NIST, ISO
and SOC.
Working knowledge of a wide range of technologies and best practices in securing
them, including working knowledge of key concepts in :
a. Database encryption
b. Integration security
c. Server security and patch management
d. Firewalls and network security
e. Application security
f. Mitigating common infrastructure vulnerabilities
Expert knowledge of the key concepts in user and identity access management.
Working knowledge of security governance risk and compliance (GRC).
Working knowledge of the concepts of data privacy regulations, including FERPA
requirements or similar regulated data classifications.
Knowledge of best practices in security training and awareness.
Strong knowledge of tools and techniques for data security and data recovery.
Working knowledge of technology budget planning and budget management
concepts is critical.
Knowledge of standard accounting practices.
Knowledge of formal PMI-based project management practices.
Knowledge of ITIL-based IT Service Management (ITSM) concepts.
Skills
Extremely strong people management skills are required
Demonstrated expertise in IT project planning, development and implementation.
Must be able to own multiple initiatives as a project sponsor and see them through
to completion.
Highly skilled at vulnerability assessment, testing and reporting.
Managing external partners in the completion of project work as well as outsourced
operational work.
Strong business and financial acumen.
Demonstrated expertise is various aspects of data security including access
management, data obfuscation and data breach avoidance.
Excellent analytical, conceptual thinking and strategic planning skills.
Influencing skill, including the ability to show the business value of technical
initiatives or extrapolate conceptual technical solutions for business problems such
that non-technical audiences can see that value.
Must be a self-starter who can not only operate with minimal direction, but who
can also bring new ideas to the table and successfully lead and complete approved
initiatives with minimal supervision.
Maintaining an established work schedule.
Effectively using interpersonal and communications skills.
Effectively using organizational and planning skills with attention to detail and
follow-through.
Maintaining confidentiality of work-related information and materials.
Establishing and maintaining effective working relationships, including the ability to
coordinate the work of others.
Required Work Experience
7+ years of experience in Information Security roles of progressively increasing
responsibility.
4+ years of related work experience leading a Cybersecurity organization.
3+ years experience in a technology leadership role where both project and
operational budgeting was a key component of the job.
Required Education
Bachelor's degree
Experience cannot be substituted for required, applicable educational level.
Chief Cloud Security Sales Officer (Hiring Immediately)
Worldwide Cloud Security portfolio. Drive the company’s sales execution of Cloud Security globally. Background in selling Cloud Security products is a plus. Strong understanding of Security management technologies and competitive offerings in the marketplace. ...
Information Systems Security Officer (Special Programs)
Information Security Auditing: Provides technical expertise and oversight to manage the daily administration of security protection measures on the information systems assigned. Information Systems Security Officer (Special Programs). Manage security programs to meet ARL: UT's Risk Management Framew...
Chief Information Security Officer (CISO) #2172
Chief Information Security Officer (CISO). The CISO will be accountable for the successful implementation of well-defined security projects, and operational practices related to information security. Reporting to the CIO, the CISO is a key member of the leadership team and responsible for the securi...
ARL Information Systems Security Officer
Assist in verifying that Lab wide information security standards, policies, and practices are being followed, and closely coordinate with and provide training and guidance to others within the laboratory, on ensuring and maintaining the security posture of all information systems as well as implemen...
Chief Information Security Officer (CISO)
Chief Information Security Officer (CISO). Reporting to the CIO, the Chief Information Security Officer (CISO) is a key role on the. Building out and maintaining an information security team that is able to satisfy the. Providing overall day-to-day direction to a team of information security. ...
Chief Information Security Officer (CISO) (The Security Sentinel)
We’re searching for a Chief Information Security Officer (CISO) (aka The Security Sentinel) to take charge of our information security strategy and ensure our defenses are second to none. Extensive experience in information security, including deep knowledge of security frameworks, threat landscapes...
Information System Security Officer #2417
Information System Security Officer - Assessor. At least 5 years of experience in common information security and risk management frameworks. Strong knowledge of information security practices, procedures, and regulations. Perform security assessments and reviews of account permissions, computer dat...
Information Systems Security Officer (ISSO)
The selected candidate will join the LMA Classified Cybersecurity Team as an Information Systems Security Officer (ISSO) on-site at Fort Worth, Texas. We believe by applying the highest cybersecurity standards and fostering an environment of diversity and inclusion, we are better prepared to meet cu...
Deputy Chief Information Officer (Public Safety Technology)
Represents the Chief Information Officer at meetings as requested. ...
Information Security Officer
As Regional Information Security Officer for North America and Mexico, your job will be to represent Wise Security Squad, creating strong partnerships within our North America and Mexico legal entities to help reduce Information Security and Technology risk in line with the expectations of the marke...