[Hiring] Information Security Director @TalentOla

Role Description

Will work during the US EST hours. Some overlap with PST hours (on a needs-based basis).

• Oversee efforts to uphold confidentiality, integrity, and availability of information systems.
• Responsible for prioritizing information security awareness, vulnerability avoidance, threat protection/detection, incident response, breach recovery, and business continuity.
• Familiar with CIS and NIST, Cybersecurity Framework (US Security standards).
• Maintains a comprehensive understanding of potential threats to information system confidentiality, integrity, and availability.
• Owns information processing system administration tasks related to authentication, authorization, threat detection/protection, breach response, recovery, and business continuity.
• Drives the classification of data and systems (public, private, confidential, compliance confidential) across company assets.
• Participates in threat modelling, including assessing likelihood/frequency, impact, risk reduction, recovery, and associated costs.
• Reviews, updates, and approves company policies and standard operating procedures related to information security.
• Participates in Change Approval Board (CAB) meetings, providing input on changes with information security implications.
• Recommends, drives, and tracks information security awareness training initiatives.
• Recommends and drives implementation of appropriate security software solutions for:
  • Intrusion prevention/detection
  • Data loss protection
  • Anti-virus
  • Phishing (email)
  • Network scanning
  • Software vulnerability scanning
  • Static code analysis
  • Security information and event management (SIEM)
• Reviews system and security software logs for signs of anomalous behavior.
• Tracks results from static code analysis and application scanning tools, prioritizing vulnerability remediation with development team leaders.
• Tracks results from network penetration testing, prioritizing vulnerability remediation with operations team leaders.
• Serves as the primary point of contact for suspected or actual security events.
• Familiarity with ISO27001 and HIPAA compliance and audit standards.

Qualifications

• Experience in information security management.
• Strong understanding of security frameworks and compliance standards.
• Proven track record in threat modeling and incident response.

Requirements

• Ability to work during US EST hours.
• Willingness to travel as needed.

Benefits

• Competitive salary.
• Health and wellness programs.
• Professional development opportunities.