[Hiring] Assistant Director, Business Information Security Officer @Southern California Regional Rail Authority

Role Description

The Southern California Regional Rail Authority (SCRRA) is seeking an Assistant Director, Business Information Security Officer (BISO) who will:

• Understand key assets and processes.
• Define and evolve cybersecurity strategy.
• Identify and evaluate risks and controls.
• Suggest incremental controls or risk mitigation strategies.
• Ensure business compliance with Information Security Policies and Standards.
• Continuously monitor and report on risks and documented exceptions.
• Help the business achieve objectives without compromising security posture.
• Collaborate with internal and external auditors to ensure compliance with SCRRA’s cybersecurity procedures and industry standards.

Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, Auditing, or a related field.
• A minimum of 8 years of relevant work experience.
• A minimum of 5 years of experience in supervising and monitoring the work of subordinate staff or project managers.
• A combination of training, education, and/or experience that provides the required knowledge, skills, and abilities may be considered.
• Advanced relevant coursework may also substitute for a portion of required experience.

Requirements

• A minimum of 5 years of experience in business security policy development, metrics capture, and analysis and system authorization.
• Certification pertaining to information security and data privacy protection (CISSP, CISA, CRISC, CISM, CEH, etc.).
• Experience in compliance, government, or financial industry.
• Experience in the design and implementation of information security programs.
• Knowledge and experience with security and governance frameworks: SSAE-18 (SOC-2), HIPAA, PCI-DSS, ISO27991, NIST, FedRAMP.

Company Description

The SCRRA is an Equal Opportunity Employer. In compliance with the Americans with Disabilities Act, the Authority will provide reasonable accommodations to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer.