CHIEF INFORMATION SECURITY OFFICER

Target Labs, Inc; Princeton (NJ); On-site; USD 150,000 - 200,000; Full time

Job summary

A leading company is seeking a Chief Information Security Officer (CISO) to enhance and oversee their information security management program. The CISO will ensure the protection of critical information assets, guide security initiatives, and align with established security frameworks. Ideal candidates will possess significant management experience and relevant certifications.

Qualifications

• 7 to 10 years of progressive information security management experience.
• Expert knowledge in frameworks like ISO 27001, ISO 27002, COBIT.
• Demonstrated ability to communicate security concepts effectively.

Responsibilities

• Oversee the development and implementation of the information security program.
• Ensure alignment with security standards and develop global policies.
• Manage security personnel and incident response.

Skills

Information security technologies

Risk management practices

Communication skills

Integrity

Job description

Job Title: Chief Information Security Officer

Location: US-NJ-Princeton

Travel Required: Minimal

Overview:

The CISO is responsible for maintaining and maturing the enterprise-wide information security management program to ensure that information assets, intellectual property, and critical infrastructure are adequately protected.

Responsibilities:

1. Oversee the development, implementation, and advancement of the company-wide Information Security program:
   • Facilitate appropriate resource allocation and increase the efficacy of the program.
   • Security organization development.
   • Ensure alignment with Information Security Standards, such as ISO 27001/27002, COBIT.
   • Develop, implement, and publish global information security standards, policies, and guidelines.
   • Develop business-relevant metrics to measure the efficiency and effectiveness of the information security management program.
   • Mentoring and management of internal security personnel.
   • Security incident response management.
   • Creation and implementation of Information Security Awareness programs.

Desired Experience:

Must have a solid understanding of information security technologies, methods, and risk management practices typically gained in 7 to 10 years of progressive information security management and/or risk management experience.

• Expert knowledge of security and control frameworks such as ISO 27001, ISO 27002, COBIT, ITIL.
• Ability to relate business requirements and risk to technology implementations for security-related issues.
• Knowledge of best-practice methodologies, tools, and technologies for policy development and implementation, role-based authorization, authentication technologies, and defending against security attacks.
• Excellent communication and presentation skills.
• Demonstrated ability to serve as an effective member of the senior management team and communicate security concepts to technical and non-technical audiences.
• High level of personal integrity, professionalism, and judgment in handling confidential matters.

Desired Certifications:

Information Security certifications such as CISSP or CISM are required, with CISSP highly preferred.