Information Security & Compliance Manager

Description

Job Description The Information Security & Compliance Manager will develop and implement policies and best practices relative to security and compliance, and business continuity for the company. The primary directive of the Information Security and Compliance Manager is to ensure the security and continued viability of the company on a daily basis by protecting its interests.Primary Responsibilities Policy creation, implementation and review of all Information Security and Compliance related issuesExecute review of key controls outputs to validate complianceMonitor completion of periodic control tasks by other teamsMake recommendations on the necessary tools and processes to protect assetsIncident management and breach responseComplete vendor due diligence reports in accordance with PMO repository processBusiness Continuity & Disaster Recovery engagement for the company and networksRisk Assessment / Risk Analysis / Risk ManagementProvide support to development team in understanding vulnerabilities and remediation optionsLead Compliance/Audit EffortsEstablish, run and ensure proper security training for the organizationResponsible for assisting internal investigations that involve Legal Affairs and/or Human Resources when necessary Experience Required Bachelor Degree in Business, Computer Science, Information Systems, or a related field is preferred.58 years of practical experience, 3 years experience in an information security roleSkills and experience in business process review and improvement along with a strong sense of urgencyFedRAMP specific experience a plusMust be a business process documentation expertMust be passionate about Information Security, have excellent analytical, problemsolving, risk analysis and negotiation skillsStrong understanding of security operation concepts perimeter defense, BYOD management, data loss protection, risk assessment and security metricsUnderstanding of malicious codeMust have excellent interpersonal and organizational skills, as well as the ability to communicate effectivelyMust have the ability to multitask, prioritize and be able to work independently or within a team environment.Understanding of IS impacts of external industry and governmental regulations (such as SOX, PCI, HIPPA, etc.)Ability to develop solutions to a variety of complex problems, and reference established precedents and policies