Chief Information Security Officer - CISO Job at SherlockTalent, Boca Raton, FL

cCtadGZrUkZwUWFYWk4wVzUzZnV6eEJBdUE9PQ==
  • SherlockTalent
  • Boca Raton, FL

Job Description

Full Time/Perm (On-Site) 150K - 180K Leading IT company in Boca Raton, FL is seeking a Chief Information Security Officer (CISO) to manage a small team of Security Analysts, maintain a consolidated privacy and security program, and conduct audits to achieve validation of compliance with PCI, DSS, HIPAA and other privacy laws and compliance mandates for the company technology and security program. We are looking for a CISO with a strong background in Information Security, Privacy, and Compliance. The ideal candidate will have strong knowledge and significant experience in Risk Management, Compliance Management, Data Protection and Privacy, Governance, Vendor/Customer Contract Management, and strong communication skills. This position is highly technical and involves working with the various technical groups and critical infrastructure to build effective analysis capabilities to better protect the organization from cyber-attacks and threats. This position reports directly to the CTO. Responsibilities: Develop and maintain a consolidated privacy and security program that integrates requirements across various compliance mandates, including PCI DSS, HIPAA, HITRUST and various privacy laws, including GDPR and CCPA. Actively manage the implementation of and validate adherence to security practices across the organization to comply with the various privacy law and compliance mandates. Support and lead a team of security practitioners in various practices such as incident management, application security, vulnerability management, and auditing. Resolve allegations of non-compliance with the corporate policies or notice of information practices. Govern security-specific metrics that demonstrate the performance of the security program including reduction in program cost, reduction in security incidents, and positive independent security assessment outcomes. Report on a periodic basis to the CTO or committee regarding the status of the security and privacy program. Mature the Privacy and Security program to better support the organization’s core business strategy as an enabler for driving business development initiatives. Provide strategic guidance to corporate officers regarding risk to information resources and technology. Provide leadership in the planning, design and evaluation of privacy and security related projects. Conduct audits of business partners to achieve independent validation of compliance with PCI, DSS, HIPAA and other privacy laws and compliance mandates for the company’s technology and security program. Maintain and mature a corporate-wide privacy and security training program. Oversee appropriate sanctions for failure to comply with the corporate privacy policies and procedures. Actively monitor the regulatory and legislative landscape for changes in requirements to protect the security and privacy of regulated data. Requirements: Eight (8) years progressive experience in Information Security, or related field Three (3) years’ experience in a supervisory or senior level (plan, organize, and direct the work of a technical staff) Four (4) years’ experience in technical program management Cyber-Security Certifications (CISSP, CISM, CISA, etc.) Active proficiency in the following areas: Networking and communications protocols (TCP, FTP, DNS, etc.) Security architecture: firewalls, trust-boundaries, encryption, segmentation strategies, Cloud services, etc. Internet security, including: transport security and web application security Incident response and management (SIEM, IDS, forensic techniques, etc.) Security auditing (vulnerability and penetration testing) Identity and access management Business resilience planning Data privacy, including GDPR, CCPA, etc. Compliance management, including service provider management, PCI DSS and HIPAA compliance auditing A comparable combination of education, training, and experience which provides the requisite knowledge, skills, and abilities for this position may be substituted for the minimum qualifications. #J-18808-Ljbffr SherlockTalent

Job Tags

Permanent employment, Full time, Contract work,

Similar Jobs

Lactalis Canada

Environment, Health and Safety Manager Job at Lactalis Canada

 ...and more! About the opportunity: The site Environment, Health & Safety (EHS) manager will be responsible for providing leadership...  ...action plans are executed. Prepare and conduct periodic occupational health and safety sites audits and ensure that all... 

STEPS Talent

Senior Network Security Engineer Job at STEPS Talent

 ...Job Title: OT Network Security Engineer Location: Houston, TX Preferred (or within 1 hour of a major airport anywhere in the U.S.) Client: Professional Services Duration: 1224 months Travel: Up to 20% (on-site implementation & hypercare support) Overview... 

Beehive Industries

Principal Engineer, Additive Manufacturing Job at Beehive Industries

 ...function is to work with a cross functional team to develop metal 3D printing processes for Binderjet printing process. With this the...  ...Industries offers a comprehensive benefits package that includes group Medical, Dental, Life, and Short and Long-Term disability coverage... 

LCDC LOGISTICS LLC

Delivery Driver (21+ years old)/(Valid Driver's License) Job at LCDC LOGISTICS LLC

 ...applicants need apply, must be 21 years or older with a valid TX driver's license! Delivery Driver Non CDL Delivery Driver Full-time NON CDL...  ..., and enjoyable workplace environment. You'll operate UP to4 days a week, with shifts of UP to 10 hours each . A commitment... 

Adams & Martin Group

Long-Term Document Review Attorney Job at Adams & Martin Group

 ...firm as it grows. There will also be an opportunity to perform legal research and other substantive legal duties, however, the main function...  ...will be document review. This position is full-time, 100% remote. Candidates must be actively licensed and in good standing...