Director- Cybersecurity Privacy and Risk

Hamlyn Williams; New York (NY); Remote; USD 150,000 - 210,000; Full time

Job summary

Une entreprise leader dans le secteur de la cybersécurité recherche un Directeur en Cybersécurité Privacy and Risk pour superviser la gouvernance en sécurité de l'information. Vous serez responsable de développer et formaliser des politiques, en collaborant avec les départements de la protection de la vie privée et de l'IT. Un rôle clé axé sur la gestion des risques, exigeant une vaste expérience en IT et une capacité à innover dans des situations complexes.

Qualifications

• Au moins 15 ans d'expérience en IT ou en sécurité de l'information.
• Minimum de 10 ans d'expérience en postes de supervision.
• Expérience souhaitée dans une entreprise juridique ou de conseil.

Responsibilities

• Coordonner les initiatives de gouvernance et de risque de cybersécurité.
• Développer des contrôles de risque cyber au sein des structures établies.
• Agir comme facilitateur entre les processus de gouvernance et de gestion des risques.

Skills

Gestion des risques informatiques

Développement de politiques de cybersécurité

Analyse des données

Communication

Leadership

Tools

Microsoft Office

Job description

Director- Cybersecurity Privacy and Risk

The Director, Cybersecurity and Privacy Risk will oversee the advancement of Information Security Governance and Risk functions, ensuring alignment with the organization's Information Security Policy. This role involves developing, maintaining, and enhancing policies, standards, processes, and procedures. A critical aspect of the position includes fostering collaboration, building relationships, and coordinating efforts across departments such as Privacy, IT, and the Office of General Counsel for the organization. This is a remote role but candidates must live in : NYC, Chicago, Washington DC, or Atlanta.

Key Responsibilities

• Oversee and coordinate Information Security Governance and Risk initiatives, ensuring prioritization of critical activities.
• Develop and formalize cyber risk controls within established frameworks (e.g., ISO standards, NIST controls) and integrate these controls into the Information Security Policy.
• Lead efforts to maintain and refine standards, policies, and controls to meet compliance requirements and support ongoing monitoring, reporting, and metrics.
• Act as a facilitator between governance and risk management processes, connecting information security activities with IT controls.
• Establish a repository of processes and procedures mapped to specific controls, adapting these controls to identified risks.
• Set objectives and implement strategies to enhance Information Security Governance and Risk services using effective delivery and management techniques.

Core Competencies

• Proven ability to address complex IT risk management challenges with innovative solutions.
• Expertise in developing and overseeing cybersecurity policies, processes, and procedures.
• Proficiency in utilizing tools and technology to deliver data analytics and insights on cyber threats, risks, and vulnerabilities.
• Strong document preparation skills using Microsoft Office to deliver concise and accurate project outputs.
• Demonstrated leadership in managing and guiding cross-functional teams and business functions.
• Exceptional communication skills, with a focus on fostering collaboration and building strong partnerships across teams.

Qualifications

• Extensive experience in a comparable leadership role preferably coming from a Law firm or Large consulting firm.
• A minimum of 15 years of experience in the Information Technology or Information Security field.
• At least 8 years of experience in a professional services or legal environment (preferred).
• A minimum of 10 years in supervisory roles.