Information Security Officer

redShift Recruiting LLC; Town of Niskayuna (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

redShift Recruiting LLC is seeking a security leader to guide the protection of people, data, and technology. You will set the direction for the security program, translate policy into practice, and partner with IT leadership to make security a shared responsibility across the organization.

You'll lead a hands-on, strategic security function, coordinating incident response, risk assessments, and security training while collaborating with vendors and staff at all levels in a fast-paced

Qualifications

• Bachelor's degree, or an equivalent mix of education, training, certifications, and experience
• At least 5 years in information security or a closely related field
• Skill at explaining complex security topics to audiences ranging from everyday users to senior executives
• Familiarity with data protection and breach regulations and frameworks such as PCI, HIPAA, and the NIST 800 series
• Practical experience with networking, VPN, next-generation firewalls, network access control, SIEM, authentication, and encryption
• CISSP, GIAC, or a comparable certification is preferred
• Strong communication and relationship-building skills, with careful attention to documentation
• A positive, collaborative style, good prioritization, and comfort working both independently and as part of a team in a fast-moving environment

Responsibilities

• Lead the Security Program: Build, run, and refine the organization's security program, including policies, standards, risk management, and incident response
• Create and maintain a forward-looking security roadmap for systems, networks, and data
• Contribute to IT leadership planning and set security goals alongside the wider technology team
• Find and Reduce Risk: Run and review vulnerability assessments and coordinate periodic organization-wide security evaluations
• Manage security tool settings and configurations
• Review and audit firewall rules managed by an outside network partner, and work with that partner to examine logs and events for unusual activity
• Help evaluate the security posture of new vendors and products
• Respond and Educate: Direct the response to security incidents, suspected policy violations, and outside complaints or inquiries, from first report through resolution
• Deliver security awareness training and communicate practices clearly to staff at every level
• Work with IT colleagues to track and complete security initiatives

Skills

Security leadership

Policy development

Risk management

Executive communication

SIEM

Firewall management

Networking basics

Encryption

Education

Bachelor's degree

CISSP/GIAC (preferred)

Tools

VPN

Next-gen firewalls

Network access control

SIEM

Job description

Our client, an established organization with a close-knit community of users, is hiring a security leader to guide how it protects its people, data, and technology. Reporting to the head of IT, you will set the direction for the security program, turn policy into everyday practice, and help colleagues across the organization see security as something they share ownership of. This is a visible, hands-on role for someone who enjoys being both a strategist and a trusted advisor.

What You'll Do

Lead the Security Program

• Build, run, and refine the organization's security program, including policies, standards, risk management, and incident response
• Create and maintain a forward-looking security roadmap for systems, networks, and data
• Contribute to IT leadership planning and set security goals alongside the wider technology team

Find and Reduce Risk

• Run and review vulnerability assessments and coordinate periodic organization-wide security evaluations
• Manage security tool settings and configurations
• Review and audit firewall rules managed by an outside network partner, and work with that partner to examine logs and events for unusual activity
• Help evaluate the security posture of new vendors and products

Respond and Educate

• Direct the response to security incidents, suspected policy violations, and outside complaints or inquiries, from first report through resolution
• Deliver security awareness training and communicate practices clearly to staff at every level
• Work with IT colleagues to track and complete security initiatives

What You Bring

• Bachelor's degree, or an equivalent mix of education, training, certifications, and experience
• At least 5 years in information security or a closely related field
• Skill at explaining complex security topics to audiences ranging from everyday users to senior executives
• Familiarity with data protection and breach regulations and frameworks such as PCI, HIPAA, and the NIST 800 series
• Practical experience with networking, VPN, next-generation firewalls, network access control, SIEM, authentication, and encryption
• CISSP, GIAC, or a comparable certification is preferred
• Strong communication and relationship-building skills, with careful attention to documentation
• A positive, collaborative style, good prioritization, and comfort working both independently and as part of a team in a fast-moving environment