[Hiring] Manager - Information Security & Compliance @Holman

Role Description

Holman is currently accepting applications for the position of Manager- Information Security & Compliance.

• Develops and maintains a security program and executes initiatives that address identified risks and security requirements.
• Develops and maintains a security focused governance, risk and compliance program.
• Maintains security organizational profiles, data inventories, threats and risks for Holman companies.
• Advises management on best practices, current trends, and pertinent changes in internal/external threats and opportunities in a timely and anticipatory manner.
• Presents, influences and executes on action plans.
• Develops new and proposes changes to policies and procedures to ensure operating efficiency and regulatory compliance.
• Provides security communication, awareness and training for audiences, which may range from senior leaders to field staff.
• Consults with Technology and the Business to ensure security is factored into the evaluation, selection, installation and configuration of hardware, purchased software, developed software and vendors.
• Plans and conducts assessments including but not limited to organizational, compliance, risk, program, system, policy, incident response and general security.
• Manages the organization’s response during Information Security Incidents.
• Monitors compliance of information security policies and communicates and reports infringements to Senior Management.
• Manages a staff of information security professionals, hires and trains new staff, and conducts performance reviews.
• Provides leadership and coaching which includes technical and personal development programs.

Qualifications

• 5-7+ years of Information Security experience.
• 3+ years in a management/leadership role.
• Strong experience in developing and executing security architecture and strategies, including strategic, tactical and project level plans.
• Strong experience with common information security frameworks, such as:
  • International Standards Organization (ISO) 2700x
  • IT Infrastructure Library (ITIL)
  • Control Objectives for Information and Related Technology (COBIT)
  • NIST 800-53
  • Center of Information Security Critical Security Controls
• Familiarity with applicable legal and regulatory requirements, including:
  • U.S. Sarbanes-Oxley Act
  • FTC Data Safeguards
  • Payment Card Industry (PCI)
  • EU General Data Protection Regulation (GDPR)
  • Personal Information Protection and Electronic Documents Act (PIPEDA)
• Working knowledge of various technology tools used to manage and perform security and compliance functions.

Requirements

• Four year college degree or demonstrated equivalent experience as determined by department management.
• Security certifications such as CISMP/GIAC/CISA/CISM or ISACA is a plus.

Benefits

• Health Insurance
• Vision Insurance
• Dental Insurance
• Life and Disability Insurance
• Flexible Spending and Health Savings Accounts
• Employee Assistance Program
• 401(k) plan with Company Match
• Paid Time Off (PTO)
• Paid Holidays, Bereavement, and Jury Duty
• Paid Pregnancy/Parental leave
• Paid Military Leave
• Tuition Reimbursement