Creatio · 4 days ago

Head of Cybersecurity

United States

Full-time

Remote

Director/Executive

7+ years exp

Maximize your interview chances

CRMDeveloper Tools

Growth Opportunities

Insider Connection @Creatio

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Developing and implementing a thorough information security strategy and roadmap to address current and future threats, vulnerabilities, and risks

Providing strategic direction and leadership for the Information Security team, ensuring alignment with business objectives, industry standards, and best practices

Overseeing risk assessment and management processes, identifying and prioritizing security risks, and implementing appropriate controls and mitigation strategies

Ensuring ongoing compliance with relevant regulations and standards like ISO 27001, ISO 27017/18, SOC 2 Type, HIPAA, GDPR, etc.

Supervising the evaluation and management of security risks associated with third-party vendors and partners

Developing and implementing security awareness programs to educate employees and promote a culture of security awareness and compliance

Establishing and maintaining security policies, standards, and procedures to ensure compliance across the organization

Defining and tracking key security metrics to evaluate the effectiveness of security controls and reporting on security status to executive leadership and stakeholders

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

CISSPCISMCISAInformation Security LeadershipISO 27001SOC 2HIPAAGDPRCloud SecurityAWSAzureSecurity Incident ManagementFEDRampProject ManagementCross-Functional Collaboration

Required

Bachelor’s degree in Computer Science, Information Security, or related field

Industry certifications such as CISSP, CISM, CISA, or equivalent

3+ years experience in information security leadership roles in SaaS domain / +7 years experience in the information security field overall

Good knowledge of security frameworks, standards, and regulations, including ISO 27001, SOC 2, HIPAA, GDPR, etc

Strong understanding of cloud security principles and best practices, particularly in AWS/Azure

Experience in managing security incidents and leading incident response

Good communication and interpersonal skills, with the ability to effectively communicate security-related questions to technical and non-technical stakeholders (employees, customers, or partners)

Project management skills, with the ability to manage projects such as processes implementation and improvement, security systems implementation

Ability to collaborate cross-functionally and influence stakeholders at all levels of the organization