Information Security Leader | GLBA & SOC 2 Expert

Infovisa; Cornelius (NC); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Infovisa is seeking an Information Security Officer to own and drive the company's security program across network, cloud, and application layers. You will set policy, supervise security tooling, and provide executive-level risk oversight to protect critical financial technology services.

Lead incident response, compliance efforts, and audits while partnering with IT and management. Requires strong leadership, policy-writing, and hands-on security expertise with Check Point and AWS security.

Qualifications

• 10 years of information security experience.
• Three years of management experience.
• Hands-on expertise across firewalls and network security (Check Point preferred).
• Working knowledge of GLBA (Safeguards Rule) and SOC 2 control frameworks; demonstrated experience supporting audits and regulatory examinations.
• Strong policy and procedure-writing skills and a track record of detailed technical documentation.
• Valid driver’s license.
• Four-year degree in information technology / systems, or computer and information science or equivalent experience.
• Preferred: Check Point certification and one or more applicable security certifications (e.g., CISSP, CISM, or equivalent).

Responsibilities

• Own the information security program including strategy, policies, standards, and day-to-day execution; close findings.
• Report security risk and remediation to executive management with threat level context.
• Operate and maintain enterprise security monitoring and log-management; define data inputs and alerting.
• Manage endpoint detection and response and related malware protection.
• Own vulnerability management lifecycle from identification to remediation; set patch and hardening standards.
• Define firewall change policy and security configurations; oversee changes.
• Set identity and access-management standards and perform access reviews.
• Lead security incident response through detection, containment, remediation, and review.
• Develop, maintain, and enforce security policies; coordinate SOC 2 readiness.
• Participate in audits, third-party scans, and regulatory examinations.
• Conduct vendor security reviews and manage security vendor relationships.
• Manage cybersecurity awareness training for all associates.
• Hire, train, and mentor security team; guide IT staff on security changes.
• Interface with FS-ISAC/IT-ISAC and InfraGard; share information as appropriate.
• Assist in annual security budget planning and expense tracking.
• Participate in after-hours on-call; occasional after-hours/weekend work.

Skills

Information security

Leadership

Policy writing

Audits & compliance

Cloud security

Incident response

Education

Bachelor's degree in IT / CS

Security certifications (CISSP/CISM)

Tools

Check Point firewall

SIEM

EDR (CrowdStrike)

AWS security

Job description

Infovisa is seeking an Information Security Officer to own and drive the company's security program across network, cloud, and application layers. You will set policy, supervise security tooling, and provide executive-level risk oversight to protect critical financial technology services.

Lead incident response, compliance efforts, and audits while partnering with IT and management. Requires strong leadership, policy-writing, and hands-on security expertise with Check Point and AWS security.