Head of Information Security & Data Privacy

gtweed; Lansdale (Montgomery County); On-site; USD 150,000 - 230,000; Full time

Job summary

Greene, Tweed seeks a senior information security leader to drive a strategic, enterprise-wide program ensuring confidentiality, integrity, availability, and privacy of information assets. The role partners with Legal and Data Privacy to align with global regulations and to advance a robust, risk-based control framework across the organization.

You will oversee incident response, disaster recovery, and budgeting while collaborating with executive stakeholders to elevate security maturity and

Qualifications

• Demonstrated experience in leadership roles in risk and information security.
• Strong understanding of legal and regulatory requirements for data protection.

Responsibilities

• Leads the information security function across the company to ensure consistent and high-quality information security management in support of the business goals
• Determines the information security approach and operating model in consultation with stakeholders and aligned with risk management and compliance monitoring of non-digital risk areas
• Manages the budget for the information security function
• Develops, implements and monitors a strategic, comprehensive information security program to ensure confidentiality, integrity, availability, safety, privacy and recovery of information assets
• Creates and manages a unified, risk-based control framework to integrate requirements from global laws, standards and regulations
• Develops and maintains a document framework of up-to-date information security policies, standards and guidelines
• Facilitates a metrics and reporting framework to measure the program's efficiency and effectiveness and communicates with executives and the board
• Collaborates with the data privacy officer to ensure privacy requirements are included where applicable
• Defines and facilitates processes for information security risk and regulatory assessments
• Ensures security is embedded in project delivery with appropriate policies
• Oversees external dependencies, including reviews of contracts and risk management alternatives
• Manages and contains information security incidents to protect assets and reputation
• Monitors external threat environment and advises on actions
• Develops disaster recovery policies aligned with BCM goals
• Coordinates incident response plans for critical services
• Partner with Legal to ensure data protection strategy and compliance
• Act as primary contact for data privacy matters including data breaches
• Ensure DPAs with vendors meet standards and compliance
• Compliance monitoring with relevant functions to identify and mitigate risks
• Work with IT to ensure controls for data security
• Data privacy impact assessments for new projects
• Liaise with German DPO for Germany-specific requirements
• Data Subject Access Requests handling and governance
• Maintain repository of data protection materials

Skills

Information security leadership

Risk management

Regulatory compliance

Vendor risk management

Job description

Greene, Tweed seeks a senior information security leader to drive a strategic, enterprise-wide program ensuring confidentiality, integrity, availability, and privacy of information assets. The role partners with Legal and Data Privacy to align with global regulations and to advance a robust, risk-based control framework across the organization.

You will oversee incident response, disaster recovery, and budgeting while collaborating with executive stakeholders to elevate security maturity and