Information Security Engineer-US

Breakdown Services; Los Angeles (CA); A distancia; USD 150.000 - 190.000; Jornada completa

Descripción de la vacante

Nonfat Media is seeking an experienced Information Security Engineer to join as a full-time, remote senior leader responsible for building and guiding our cybersecurity program. You will shape strategy, policy, incident response, and governance across the organization while ensuring alignment with business goals.

This role requires strong leadership, risk management expertise, and collaboration with IT and business units.

Formación

• Bachelor's or Master's degree in Information Security, Computer Science, or a related field.
• Proven experience in a cybersecurity leadership role.
• Industry certifications such as CISSP, CISM, or CISA are highly desirable.
• Strong understanding of cybersecurity technologies, risk management, and compliance.
• Excellent leadership, communication, and interpersonal skills.

Responsabilidades

• Develop and lead the implementation of the organization's cybersecurity strategy, ensuring alignment with business objectives.
• Provide strategic direction and vision to the cybersecurity team, fostering a culture of security awareness and compliance throughout the organization.
• Conduct regular risk assessments to identify and prioritize cybersecurity risks.
• Develop and implement risk mitigation strategies and controls to safeguard the organization against potential threats.
• Establish and maintain effective security governance frameworks, policies, and procedures.
• Ensure compliance with relevant laws, regulations, and industry standards related to information security.
• Develop and maintain an incident response plan, including coordinating the response to cybersecurity incidents.
• Conduct post-incident analysis to identify root causes and recommend improvements to prevent future incidents.
• Collaborate with IT and business units to integrate security best practices into the design and development of systems and applications.
• Ensure the continuous evaluation and enhancement of security architecture to address emerging threats.
• Implement a comprehensive security awareness program for employees, promoting a security-conscious culture.
• Provide training on cybersecurity best practices and conduct regular drills to test the organization's readiness for security incidents.
• Oversee the assessment and management of cybersecurity risks associated with third-party vendors and partners.
• Ensure that vendors adhere to the organization's security standards and policies.
• Implement and manage security monitoring tools and processes to detect and respond to security events.
• Generate regular reports on the organization's cybersecurity posture and incidents for executive leadership.

Conocimientos

Leadership

Communication

Interpersonal skills

Educación

Bachelor's degree in Information Security, Computer Science, or related field

Master's degree in Information Security or related field

Certifications: CISSP, CISM, CISA

Descripción del empleo

Nonfat Media is seeking a dynamic and experienced Information Security Engineer to join our organization. The position is full time, permanent and REMOTE. Candidates must be authorized to work and reside in either California, New York, Nevada or Rhode Island. The ISE will be responsible for developing and implementing robust cybersecurity strategies, policies, and practices to safeguard our organization's information assets and ensure the integrity, confidentiality, and availability of our data.

Responsibilities

• Develop and lead the implementation of the organization's cybersecurity strategy, ensuring alignment with business objectives.
• Provide strategic direction and vision to the cybersecurity team, fostering a culture of security awareness and compliance throughout the organization.

Risk Management

• Conduct regular risk assessments to identify and prioritize cybersecurity risks.
• Develop and implement risk mitigation strategies and controls to safeguard the organization against potential threats.

Security Governance

• Establish and maintain effective security governance frameworks, policies, and procedures.
• Ensure compliance with relevant laws, regulations, and industry standards related to information security.

Incident Response And Management

• Develop and maintain an incident response plan, including coordinating the response to cybersecurity incidents.
• Conduct post-incident analysis to identify root causes and recommend improvements to prevent future incidents.

Security Architecture And Design

• Collaborate with IT and business units to integrate security best practices into the design and development of systems and applications.
• Ensure the continuous evaluation and enhancement of security architecture to address emerging threats.

Security Awareness And Training

• Implement a comprehensive security awareness program for employees, promoting a security-conscious culture.
• Provide training on cybersecurity best practices and conduct regular drills to test the organization's readiness for security incidents.

Vendor And Third-Party Risk Management

• Oversee the assessment and management of cybersecurity risks associated with third-party vendors and partners.
• Ensure that vendors adhere to the organization's security standards and policies.

Security Monitoring And Reporting

• Implement and manage security monitoring tools and processes to detect and respond to security events.
• Generate regular reports on the organization's cybersecurity posture and incidents for executive leadership.

Qualifications

• Bachelor's or Master's degree in Information Security, Computer Science, or a related field.
• Proven experience in a cybersecurity leadership role.
• Industry certifications such as CISSP, CISM, or CISA are highly desirable.
• Strong understanding of cybersecurity technologies, risk management, and compliance.
• Excellent leadership, communication, and interpersonal skills.

Please do not contact the employer directly