200+ applicants

Company

Original Job Post

Dense Air · 3 days ago

Senior Director Information Security

United States

Full-time

Remote

Director

10+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Information TechnologyTelecommunications

Hiring Manager

Chris Goodall-Smith

Insider Connection @Dense Air

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

In partnership with the General Counsel and Chief Technology Officer, develop, implement and maintain a strategic, long-term information security strategy and roadmap.

Serve as the main point of contact on issues related to data protection and assess risk management to mitigate potential threats.

Identify, evaluate and rectify issues within the existing data protection framework to ensure compliance and report on information security risks.

Devise training plans, provide data protection advice, and chair the company’s Information Security Council.

Ensure security management program and policies comply with applicable laws, regulations, and contractual requirements such as GDPR.

Oversee the evaluation, selection, and implementation of information security solutions and manage vendor risk.

Develop business metrics to measure the effectiveness of the security management program and monitor the industry for emerging threats.

Oversee incident response planning, investigation of security breaches, and lead due diligence related to information security for M&A activity.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Information Security PoliciesData Protection LawsGDPRCross-Border Data Transfer LawsRisk AssessmentISO 27001SOC2Vendor NegotiationsLegalAuditRisk ManagementCloud ArchitecturesSaaS ArchitecturesIoT ArchitecturesOSIIT InfrastructureApplication DevelopmentDatabase TechnologiesWeb TechnologiesMobile TechnologiesNetwork ArchitectureEnterprise ArchitectureDirectory ServicesFirewallIntrusion DetectionEncryptionCertificate AuthorityWeb FilteringAnti-MalwareAnti-Phishing

Required

A proven track record in developing information security policies and procedures, ideally in the telecommunications industry.

Expertise in data protection laws and practices, including a deep understanding of GDPR and other cross-border data transfer laws.

Ability to communicate security and risk-related concepts to both technical and non-technical audiences (in business terms).

Ability to inspire and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals, an innovative leader, problem solver and consultant.

Knowledge of security, business, risk assessment, risk and control frameworks and standards such as ISO 27001 and SOC2.

Ability to evangelize IT security to make it a critical part of business operations; build trust and respect for the security function.

Experienced with contract and vendor negotiations.

Experience in a legal, audit, or risk management role.

Excellent written and verbal communication, interpersonal and collaborative skills.

Ability to effectively prioritize and execute tasks in high-pressure situations.

Understanding of cloud, SaaS, and IoT architectures, and their implications on information security strategy.

Technical acumen including but not limited to: OSI, IT infrastructure, cloud, application development languages, tools and frameworks, database technologies, web technologies, next gen mobile, network architecture, enterprise architecture, and directory services.

Security technology acumen and experience including but not limited to firewall, intrusion detection, cyber-attack tools and defences, encryption, certificate authority, web filtering, anti-malware, anti-phishing, identity, and access management, multi-factor authentication.

Bachelor’s Degree in computer science, engineering, or a related field; (graduate degree preferred).

Professional certifications, such as a CISSP, CISM, CISA.

Minimum 10 years of IT and/or business leadership experience, and 5+ years of information security/cybersecurity experience.