Your Responsibilities
- Develop and implement a strategic, long-term information security strategy and roadmap to ensure that information assets are adequately protected.
- Work with senior leaders across the business to assess and communicate acceptable levels of risk.
- Identify, evaluate and report on information security risks, practices and projects to the Executive Committee and the Board of Directors, and provide subject matter expertise on security standards and best practices.
- Develop, mentor, and manage a high performing staff of information security professionals.
- Chair the information security steering committee.
- Lead the development of up-to-date information security policies, procedures, standards and guidelines, and oversee their approval, dissemination, and maintenance.
- Ensure that the security management program is in compliance with applicable laws, regulations, and contractual requirements.
- Oversee the evaluation, selection and implementation of information security solutions that are innovative, cost-effective, and minimally disruptive.
- Partner with enterprise architects, infrastructure, and applications teams to ensure that technologies are developed and maintained according to security policies and guidelines.
- Develop business metrics to measure the effectiveness of the security management program, and increase the maturity of the program over time.
Your Qualifications
- Minimum experience of 8 years in the field of information technology and cyber security.
- Bachelor's degree in information technology, information security, cyber security, or any related field.
- Relevant certification related to cyber/information security, data privacy, or other relevant certifications specific to this role.