Information Technology Security Director

The key objective of the Information Technology Security Director (“IT SD”) is to identify and manage the organization’s IT needs including adding updates and enhancements to current computer systems, ensuring employees’ technical issues are resolved efficiently.

This role will work closely with the VP Finance and Business Systems Manager to build a strong framework of security, process excellence and scalability of company-wide IT solutions including assessment and minimization of cybersecurity risks to the company and its customers. This will include creating and executing compliance roadmaps against ISO 27001 and other applicable standards.

The IT SD will proactively assess, and address risks posed by end-of-life assets, new technology deployment, as well as supply-chain. IT SD works with both internal and external stakeholders for timely incident response and disaster recovery.

ESSENTIAL FUNCTIONS OR DUTIES:

Manage all internally facing technology components of the business outside of Line of Business Applications. Including management of the IT MSP to:

– Manage company-wide IT projects

– Ensure employee technical issues are resolved efficiently with high service level

– Proactively assess on-premise and cloud assets for obsolescence and vulnerabilities and access control lists for mission-critical servers and services

– New technology needs to support the business

– Cybersecurity risks of the new technologies and mitigative controls

Develop, execute, and maintain compliance roadmaps against ISO 27001 and applicable internal/external standards through process development, training, internal audit, and external audit.

Work with cross-functional group of people to periodically and proactively assess:

– incident response readiness for both internal and customer-facing events

– disaster recovery readiness

– supplier cybersecurity

Work with Sales and customers to prepare and review tables of compliance for customer / project cybersecurity specifications.

Follow all company safety policies and procedures.

Respond to change productively and handle other duties as required.

QUALIFICATIONS:

Education & Experience:

– (U.S.) BS degree in Electrical Engineering, Computer Science, Systems Engineering or equivalent.

– 10+ years of experience leading or managing IT teams or projects.

– Experience with ISO 27001 Certification standard of other standards related to cybersecurity from accredited institutions such as SANS institute, EC-Council, etc. preferred.

Knowledge and Skills:

– Exceptional communications and presentation skills.  This role will interact extensively with the leadership team and many functional leaders to develop, communicate, and execute to a strategic plan.

– Ability to lead via influence.  Success in this role requires building agreement and buy-in from various groups to execute roadmaps.

– Strong business-to-business analytical, financial, and strategic thinking.

– Ability to read, speak, and write in English required.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c) Information Systems