Director of Information Security

A fantastic opportunity awaits for a highly skilled, forward-thinking, and transformative leader to join our team as a Director of Information Security. Our organization’s mission and goals rely on a visionary leader who comprehends the collaborative efforts essential to establish a resilient and secure environment while concurrently fostering an atmosphere that empowers scientific, technological, and our cross-functional teams to leverage cutting-edge technologies in advancing our mission.

As the Director of Information Security, you will shoulder the responsibility for formulating, executing, and administering our Information Security program at an enterprise scale. In this pivotal role, you will assume the mantle of overseeing cybersecurity-related operations, including incident response, and take ownership of technology controls, policies, procedures, and processes. Your role will encompass supervising security remediation initiatives, ensuring the safeguarding of our internet-facing applications, personal data, healthcare information, and preserving the privacy of the populations we serve. Additionally, you will be at the helm of directing comprehensive risk assessment endeavors and audits, while also spearheading compliance controls and monitoring aligned with our data protection and governance program.

Reporting directly to our Chief Information Officer, this role is a full-time, non-exempt position situated at our NYC headquarters. We are pleased to offer an attractive compensation package inclusive of competitive salary and a comprehensive benefits package.

At [Confidential Organization], we take pride in our recognition as a Great Place to Work-Certified company! Our compensation and benefits package encompasses medical insurance, 401(k), paid parental leave, dependent care, flexible work schedules, as well as exclusive discounts and entertainment perks programs. For detailed information about our benefits, please explore our employee benefits website.

Responsibilities:

• Formulate and execute the organization’s Information Security program.
• Conduct risk assessments and develop mitigation strategies.
• Oversee security incident management, ensuring prompt resolution.
• Assume stewardship of the organization’s security operations.
• Develop, maintain, and reinforce security policies and procedures.
• Conduct security awareness training sessions for employees.
• Collaborate closely with other departments to safeguard the organization’s systems and data.

Qualifications:

• Bachelor’s degree in information security, computer science, or a related field.
• An advanced degree is highly preferred.
• Accumulate 5-8 years of experience, encompassing a blend of risk management, information security, and IT roles, including a minimum of five years in progressively responsible senior leadership positions.
• Possess professional security management certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or equivalent credentials.
• Demonstrate a proven track record in devising information security policies and procedures and successfully executing programs within dynamic environments.
• Exhibit proficiency in common information security management frameworks, such as NIST 800-53, NIST Cybersecurity Framework, or ISO 27001.
• Showcase excellent written and verbal communication skills, effectively conveying security and risk-related concepts to both technical and non-technical audiences.
• Possess a profound understanding of technology ecosystems, spanning telecommunications, networks, programming, media, and desktop environments.
• Display comprehensive knowledge of security threats and risks.
• Demonstrate experience in implementing security measures to safeguard internet-facing applications across major public cloud platforms, including Amazon Web Services, Microsoft Azure, or Google Cloud.
• Exhibit familiarity with regulatory frameworks such as HIPAA, GDPR, and CPPA.
• Showcase a track record of safeguarding data within data-intensive environments.
• Possess outstanding interpersonal and customer service aptitudes.
• Exhibit the ability to work autonomously and collaboratively within a team.
• Demonstrate proficiency in Microsoft 365 and Google Workspace environments, as well as Hybrid Windows and MacOS endpoint environments. Additionally, expertise in Cisco Networking equipment, Windows and Linux server environments, Cloud architecture (AWS, Azure, GCP), GitHub, and server virtualization (VMWare) is a significant advantage.
• Possess strong judgment and innovative problem-solving capabilities, including adept conflict resolution.
• Show experience in managing subject matter experts and cross-functional IT professionals, including tasks such as recruitment, supervision, scheduling, development, evaluation, and disciplinary actions.
• Maintain a professional demeanor, self-motivation, keen attention to detail, and an adept ability to establish and sustain effective working relationships.
• Exhibit unwavering passion for the remarkable mission focused on children’s health that drives our organization.

LHH