DevSecOps Engineer w/Secret Clearance
TekSynap
The Chief Information Security Officer (CISO) is the executive responsible for protecting the organization's information, technology infrastructure, applications, data, and digital services from cyber threats and security risks.
Within Insurance & Investments, the CISO leads enterprise cybersecurity, information security governance, cyber risk management, security architecture, incident response, regulatory compliance, identity and access management, third-party security, and business continuity/cyber resilience.
Develop and execute the enterprise cybersecurity and information security strategy.
Establish information security policies, standards, controls, and governance frameworks.
Lead enterprise-wide cybersecurity risk management.
Protect sensitive customer, financial, investment, policyholder, employee, and corporate data.
Establish and manage cyber incident response and crisis-management processes.
Lead security monitoring, threat intelligence, vulnerability assessment, and security testing.
Develop cybersecurity controls across cloud, on-premise, applications, APIs, and digital platforms.
Implement and maintain Identity & Access Management (IAM), privileged access, MFA, and least-privilege controls.
Oversee third-party/vendor cybersecurity risk and technology due diligence.
Ensure security requirements are embedded into digital transformation and technology projects.
Lead security awareness, phishing prevention, and employee cybersecurity training.
Ensure compliance with applicable financial-services, privacy, cybersecurity, and regulatory requirements.
Manage security audits, risk assessments, control testing, and remediation programs.
Develop and test Business Continuity, Disaster Recovery, and Cyber Resilience plans.
Establish cybersecurity KPIs, KRIs, dashboards, and executive reporting.
Manage cybersecurity budgets, vendors, managed security providers, and strategic technology partners.
Lead and develop information-security and cybersecurity teams.
Advise the CEO, Board, Risk Committee, Audit Committee, and senior leadership on cyber risk.
Ensure cybersecurity risks are integrated into the organization's overall enterprise risk-management framework.
Particularly relevant experience includes protecting:
15+ years of IT, cybersecurity, information security, technology risk, or related experience.
7+ years in senior cybersecurity/security leadership.
Strong background in Insurance, Banking, Investment Management, Asset Management, Wealth Management, or Financial Services.
Experience with recognized security frameworks and standards such as NIST, ISO 27001, CIS Controls, COBIT, or equivalent.
Strong understanding of financial-services cybersecurity and regulatory requirements.
Demonstrated experience presenting cyber risk to Board/C-suite stakeholders.
Strong leadership, crisis management, risk communication, and stakeholder-management skills.
Relevant bachelor's degree; Master's degree and certifications such as CISSP, CISM, CRISC, CISA, CCSP or equivalent are advantageous.
Originally posted on Himalayas
TekSynap
Workstreet
ThinkBAC Consulting
Motorola Solutions
AppGate Cybersecurity, Inc.
AppGate Cybersecurity, Inc.
AppGate Cybersecurity, Inc.
Yum! Brands
phia, LLC
Harness
TheHiveCareers
PM Consulting
Experian
Salesforce
9th Way Insignia
Stord
GuidePoint Security LLC
Sphere, Inc.
Danaher
General Dynamics Information Technology
protectONE - R. Franz Gödde
Lucayan Technology Solutions LLC
K5 Business
HealthMark Group
Veritone
Technatomy
Baker Tilly
Exostar
Soteria
Radiology Partners
The Chief Information Security Officer (CISO) is the executive responsible for protecting the organization's information, technology infrastructure, applications, data, and digital services from cyber threats and security risks.
Within Insurance & Investments, the CISO leads enterprise cybersecurity, information security governance, cyber risk management, security architecture, incident response, regulatory compliance, identity and access management, third-party security, and business continuity/cyber resilience.
Develop and execute the enterprise cybersecurity and information security strategy.
Establish information security policies, standards, controls, and governance frameworks.
Lead enterprise-wide cybersecurity risk management.
Protect sensitive customer, financial, investment, policyholder, employee, and corporate data.
Establish and manage cyber incident response and crisis-management processes.
Lead security monitoring, threat intelligence, vulnerability assessment, and security testing.
Develop cybersecurity controls across cloud, on-premise, applications, APIs, and digital platforms.
Implement and maintain Identity & Access Management (IAM), privileged access, MFA, and least-privilege controls.
Oversee third-party/vendor cybersecurity risk and technology due diligence.
Ensure security requirements are embedded into digital transformation and technology projects.
Lead security awareness, phishing prevention, and employee cybersecurity training.
Ensure compliance with applicable financial-services, privacy, cybersecurity, and regulatory requirements.
Manage security audits, risk assessments, control testing, and remediation programs.
Develop and test Business Continuity, Disaster Recovery, and Cyber Resilience plans.
Establish cybersecurity KPIs, KRIs, dashboards, and executive reporting.
Manage cybersecurity budgets, vendors, managed security providers, and strategic technology partners.
Lead and develop information-security and cybersecurity teams.
Advise the CEO, Board, Risk Committee, Audit Committee, and senior leadership on cyber risk.
Ensure cybersecurity risks are integrated into the organization's overall enterprise risk-management framework.
Particularly relevant experience includes protecting:
15+ years of IT, cybersecurity, information security, technology risk, or related experience.
7+ years in senior cybersecurity/security leadership.
Strong background in Insurance, Banking, Investment Management, Asset Management, Wealth Management, or Financial Services.
Experience with recognized security frameworks and standards such as NIST, ISO 27001, CIS Controls, COBIT, or equivalent.
Strong understanding of financial-services cybersecurity and regulatory requirements.
Demonstrated experience presenting cyber risk to Board/C-suite stakeholders.
Strong leadership, crisis management, risk communication, and stakeholder-management skills.
Relevant bachelor's degree; Master's degree and certifications such as CISSP, CISM, CRISC, CISA, CCSP or equivalent are advantageous.
Originally posted on Himalayas