Information Security Director

TTEC; Austin (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

TTEC is seeking a Director of Information Security in Austin to lead enterprise IT security strategy and program execution. You will design security policies, oversee incident response, and ensure compliance with laws and regulations across IT, legal and operations teams.

The role requires strong communication, project management, and identity management expertise, with experience in security assessments and security policy development in complex environments.

Qualifications

• 3 years of professional experience in enterprise IT security.
• Understanding of IT security and privacy laws including forensics, SOX, PCI and HIPAA.
• Experience conducting security assessments of technical environments.
• Excellent written and oral communication; able to present to executives.
• Strong project management experience.
• Knowledge of Identity Management concepts.
• Experience coordinating incident response with internal and external entities.
• Experience developing, reviewing and implementing security policies.
• Outsourced contact center experience would be ideal.

Responsibilities

• Comprehend and enforce laws, regulations and compliance relating to IT security and privacy.
• Design and implement security policy and procedures.
• Collaborate with IT to monitor core infrastructure and systems.
• Lead security assessments of systems, apps and networks.
• Recommend security products and practices to maintain/improve IT security.
• Lead security incident response and liaison with stakeholders.

Skills

Security leadership

Policy design

Incident response

Communication skills

Project management

Identity management

Education

Bachelor's degree

Tools

Cisco

Oracle

Windows servers

Linux/Unix

Job description

Director, Information Security

The successful candidate for this position will be a highly motivated, proven self-starter with a thorough understanding of the diverse aspects of information security. The Director of IT Security is responsible for the following:

• Comprehend and enforce applicable laws, regulations and compliance relating to IT security and privacy, working closely with the Legal
• Design and implementation of security policy and procedures
• Work directly with others in the IT department to maintain and proactively monitor core infrastructure components, including products from Cisco, Oracle, MS Windows, and servers running versions of Linux/Unix operating systems
• Lead security assessments of systems, applications and networks in a complex IT environment
• Make relevant recommendations for products and procedures to maintain and improve IT security
• Lead security incident response
• Work in the evaluation of current and future applications and network devices
• Handling sensitive, confidential data
• Act as liaison with entire company to promote, educate, and ensure compliance of IT security

Requirements:

• Three years professional experience designing, implementing and managing enterprise IT security
• Thorough understanding of IT security and privacy laws, regulations and compliance, including forensics, SOX, PCI and HIPAA. SAS70, eDiscovery or COBIT/ISO experience highly desirable.
• Perform or work with others to execute security assessments of technical environments
• Ability to communicate effectively, both in writing and speech, as well as being able to prepare and present IT related material to a wide variety of audiences, including non-technical executives and management and on occasion, to large groups
• Successful project management experience
• Understanding of concepts relating to Identity Management
• Ability to coordinate incident response with many internal and external organizations including IT, legal, internal audit, operations, executive management and local and federal authorities as needed
• Experience developing, reviewing, administering, and implementing security policies
• B.A. or B.S required, advanced degree preferred
• Experience within the outsourced (BPO) Contact Center Experience would be ideal

CERTIFICATIONS:

Security certifications such as Certified Information Systems Security Professional (CISSP(ISC2)), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Global Information Assurance Certification, GIAC Information Security Officer (GISO), and/or GIAC Security Essentials Certification (GSEC).