Position Purpose And Objectives

It Information Security Officer Is Responsible For Overseeing Information Security, Cybersecurity And It Risk Management Programs Based On Industry-Accepted Information Security And Risk Management Frameworks.

Major Duties And Essential Functions

Coordinates The Continuous Development, Implementation And Updating Of Security And Privacy Policies, Standards, Guidelines, Baselines, Processes And Procedures.
Provide Overall Security Program Strategic Direction To Improve The Information Security Posture And Assurance Level Of The Organization.
Plan, Design And Audit Policies And Procedures Which Safeguard The Integrity Of And Access To Systems And Electronic Information In Order To Guard Information Against Accidental Or Unauthorized Modification, Destruction Or Disclosure.
Identifies Vulnerabilities To The Network, Applications, And Data Systems.
Develop And Manage The Frameworks, Processes, Tools And Consultancy Necessary For It To Properly Manage Risk And To Make Risk-Based Decisions Related To It Activities.
Proactive Identification And Mitigation Of It Risks As Well As Responding To Observations Identified By Third Party Auditors Or Examiners While Assisting In The Development Of Periodic Reports Presenting The Level Of Controls Compliance And Current It Risk Posture.
Assist Cto With The Audits And Facilitate Management Response And Remediation Efforts. Ensure Overall It Compliance With Regulatory Requirements Through Proactive Planning And Communication, Ownership And Relationships.
Receives Allegations Of Security Incidents And Conducts Complex Investigations; Prepares Written Findings, Recommendations And Follow Up Evaluation; And Analyzes Patterns And Trends.
Coordinates Cutx Information Security Incident Response And Reporting For Events Or Exploited Vulnerabilities Including Unauthorized System Or Network Access, Denial Of Service, Inappropriate Data Access, Data Corruption, And/Or Collection Of Private Or Confidential Information.
Responsible To Continuously Stay Up To Date With Developments In I.T. Security Standards And Threats.
Performs Related Duties As Required Or Deemed Appropriate To Accomplish Assigned Responsibilities And Functions Of The Position.

Positions Directly Supervised: N/A

Specific Knowledge, Skills, And Abilities Required For This Position:

Experience In Risk, Compliance And Information Security Policy Development.
Demonstrated Experience In, Or Working Knowledge Of, Several Information Security And Compliance Related Disciplines To Include: Information Security, Business Continuity, Disaster Recovery Planning And Testing, Risk Analysis, And Auditing.
Experience With Development Of Educational Programs In The Area Of Security Awareness.
Knowledge And Experience With Networking Concepts, Protocols, And Services.
Knowledge And Experience In Setup, Maintenance, And Security Of Windows And Linux Operating Systems.
Strong Interpersonal Skills And The Ability To Effectively Communicate With A Wide Range Of Individuals And Constituencies In A Diverse Community.
Strong Written And Oral Communication Skills.
Strong Analytical Skills And Attention To Detail.
Ability To Understand And Clearly Relate To Other Members Of The Organization, Technical Manuals, Software Specifications And General Methods Of Network Operations And Security.
Routine Contact Is Required With It Managers, Subject Matter Experts And Periodic Contact Is Required With Users.
Ability To Define Problems, Collect Data, Establish Facts, And Draw Valid Conclusions.
Ability To Read, Analyze, And Interpret General Business Periodicals, Professional Journals, Technical Procedures, Or Governmental Regulations.
Ability To Effectively Present Technical Information And Respond To Questions From Groups Of Executives, Managers, End Users And Non-Technical Personnel.
Ability To Interpret A Variety Of Instructions Furnished In Written, Oral, Diagram, Or Schedule Form.
Ability To Solve Complex Problems And Deal With A Variety Of Concrete And Abstract Variables In Situations Where Only Limited Standardization Exists.
Ability To Effectively Present Information To Top Management, It Personnel.

Education: Bachelor’S Degree Or 10 Years Equivalent Experience. Certified Information Systems Security Professional (Cissp) Or Other Information Systems Security Certifications.

Experience: • 5 + Years' Experience Operating As A Security Resource In An Enterprise Environment. Experience With Palo Alto Firewalls, Salesforce, Mulesoft, Cloud Security Best Practices, Proofpoint, Office 365 Security

Physical Activities And Requirements Of This Position

Category	Description
Finger Dexterity	Using Primarily Just The Fingers To Make Small Movements Such As Typing, Picking Up Small Objects, Or Pinching Fingers Together.
Grasping	Using Fingers And Palm On An Object.
Talking	Especially Where One Must Frequently Convey Detailed Or Important Instructions Or Ideas Accurately, Loudly, Or Quickly.
Repetitive Motions	Movements Frequently And Regularly Required Using The Wrists, Hands, And/Or Fingers.
Average Hearing	Able To Hear Average Or Normal Conversations And Receive Ordinary Information.
Average Visual Abilities	Average, Ordinary, Visual Acuity Necessary To Prepare Or Inspect Documents Or Products Or Operate Machinery.
Sedentary Work	While Performing The Duties Of This Job, The Employee Will Frequently Talk Or Hear, Sit, Use Hands To Handle Or Feel, And Reach With Hands Or Arms. The Employee Will Occasionally, Stand And Walk, Climb Or Balance, And Stoup, Kneel, Crouch, Or Crawl. The Employee Will Occasionally Lift And Move Up To 10 Pounds.

Working Conditions Of This Position

Description

None. No Hazardous Or Significantly Unpleasant Conditions.

Mental Activities And Requirements Of This Position

Reasoning Ability: The Ability To Use Common Sense Or Logic.

Detailed	Ability To Define Problems, Collect Data, Establish Facts, And Draw Valid Conclusions. Ability To Interpret An Extensive Variety Of Technical Instructions In Mathematical Or Diagram Form And Deal With Several Abstract And Concrete Variables.
Mathematical Ability: The Level Of Ability Required To Perform Math Skills And Operations.
Basic	Ability To Calculate Figures And Amounts Such As Discounts, Interest, Commissions, Proportions, Percentages, Area, Circumference, And Volume. Ability To Apply Concepts Of Basic Algebra And Geometry.
Language Ability: The Level Of Ability Required To Communicate And Understand Written And Oral Language.
Typical	Ability To Use Passive Vocabulary Of 7,000-9,000 Words; Read At A Fast-Paced Rate; And Define Unfamiliar Words In Dictionaries For Meaning, Spelling, And Pronunciation. Ability To Write Moderate To Complex Documents. Ability To Communicate In Complex Sentences, Using Normal Word Order With Present And Past Tenses And Strong Vocabulary. Ability To Read, Analyze, And Interpret Common Scientific And Technical Journals, Financial Reports, And Legal Documents. Ability To Respond To Common Inquiries Or Complaints From Customers, Regulatory Agencies, Or Members Of The Business Community. Ability To Write Speeches And Articles For Publication That Conform To Prescribed Style And Format. Ability To Effectively Present Information To Top Management, Public Groups, And/Or Boards Of Directors.