Director of IT Security

Emploi pas sur LinkedIn

🕒 il y a 1 mois

🌐 États-Unis, Canada, +2 autres pays – Distant

🇺🇸 États-Unis – Télétravail 🇨🇦 Canada – Télétravail 🇲🇽 Mexique – Télétravail 🇬🇧 Royaume-Uni – Télétravail

🏄 California, Florida, +3 états de plus – Distant

🏄 California – Remote 🐊 Florida – Remote 🌽 Illinois – Remote 🌲 North Carolina – Remote 🤠 Texas – Remote

💵 $150 000 - $190 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Directive

Site WebLinkedInTous les Emplois

11 - 50 employés

💼 Conseil

📦 Logistique

📣 Marketing

Consulting • Logistics • Marketing

Directive est la meilleure entreprise de conception web et de services informatiques à Oneonta, NY, spécialisée dans la mise en œuvre et la gestion de la technologie pour les entreprises. Elle propose une large gamme de services incluant la gestion IT, l'externalisation IT, la cybersécurité, l'hébergement cloud, le développement web et les services IT pour les organisations à but non lucratif. Avec un accent sur la surveillance proactive des systèmes IT, la formation en cybersécurité et l'hébergement cloud géré, Directive est dédiée à maintenir les systèmes opérationnels tout en maximisant la productivité des petites et moyennes organisations. Ses services incluent également la réparation d'ordinateurs, la conception web, et la conformité avec les lois telles que le NY SHIELD Act, offrant un support complet pour les besoins technologiques des entreprises.

Description

• Develop and execute the company's information security strategy and scalable security roadmap. • Establish and maintain enterprise security policies, standards and governance frameworks. • Present cybersecurity risks, recommendations and security metrics to executive leadership. • Partner with department leaders to ensure security is integrated into business operations and decision-making. • Stay ahead of emerging cybersecurity threats, AI risks and industry best practices. • Conduct ongoing enterprise-wide cybersecurity risk assessments across infrastructure, endpoints, applications and business processes. • Build and maintain the organization's cybersecurity risk register and remediation roadmap. • Lead vulnerability management efforts and prioritize remediation based on business risk. • Perform third-party vendor security assessments and ongoing vendor risk management. • Continuously evaluate new technologies and recommend security improvements. • Own the organization's incident response program, including playbooks, tabletop exercises and post-incident reviews. • Oversee endpoint security, identity and access management, privileged access controls, MFA and device security. • Partner with the Senior IT Manager to implement technical security controls and monitor the health of the environment. • Coordinate with external security vendors and managed security providers when necessary. • Develop and oversee business continuity and disaster recovery planning. • Lead security compliance initiatives including SOC 2 Type II and future security certifications. • Own customer security questionnaires and support enterprise sales opportunities by demonstrating Directive's security posture. • Partner with Legal, Insurance, and Finance on privacy, data governance, and regulatory compliance. • Maintain documentation for security policies, controls, audits, and evidence collection. • Build and/or manage company-wide security awareness and phishing training programs. • Promote a security-first culture across the organization. • Educate employees on evolving cybersecurity threats, social engineering, AI usage and data protection best practices. • Establish security metrics and regularly report organizational security maturity.

🎯 Exigences

• 7+ years of experience in cybersecurity, information security or risk management. • 3+ years leading enterprise security programs or security teams. • Demonstrated experience performing cybersecurity risk assessments and threat modeling. • Strong knowledge of cloud-first and SaaS-based environments including Google Workspace, Salesforce, NetSuite, Okta and modern identity platforms. • Experience implementing and maintaining security frameworks such as SOC 2, ISO 27001 or the NIST Cybersecurity Framework. • Deep understanding of endpoint security, identity management, vulnerability management, incident response and security operations. • Experience working within fully remote organizations supporting distributed workforces. • Strong executive communication skills with the ability to translate technical risk into business impact. • CISSP, CISM, CRISC, or equivalent cybersecurity certification is strongly preferred.

🏖️ Avantages

• Medical, dental, vision plans, disability, and life insurance coverage for you and your family that fit your lifestyle • Including a 100% employer-paid plan for you and a 50% employer contribution for your dependents • Mental - Access to certified therapists through Spring Health, membership to Headspace • Physical - Physical therapy through Omada, fertility support through Carrott, thousands of Aaptiv virtual workouts, complimentary One Medical membership for primary and virtual care • Unlimited PTO (2-week minimum), Paid Company Holidays, Your Birthday Off, End of Year Recharge (Closed December 24 - January 1), Paid Parental Leave • Traditional and Roth 401(k) with a 3% company match • Annual bonus based on tenure, which scales in total amount over time