Senior Information Security Engineer

Enterprise Engineering Inc. (EEI); New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Enterprise Engineering Inc. (EEI) seeks a Senior Information Security Engineer to operate a world-class information security program.

You will implement information security compliance processes and act as the subject matter expert in all-things information security. The Senior Security Engineer will establish, lead, and maintain the Information Security Management program comprised of policies, procedures, and systems to manage risks to its customers.

Qualifications

• 10 years of experience managing or leading information security functions.
• Experience managing information security control standards including SOC2, PCI-DSS, NIST CSF, ISO 27001.
• Experience in FinTech, banking or highly regulated sectors.
• Strong background in API-centric SaaS enterprise financial software.
• Consultative approach to security with the ability to educate developers.
• Experience in security operations, incident response and managing security incidents.
• Bachelor’s degree in Computer Science or MIS.
• Certifications such as CISSP, CISM, CCSP preferred.

Responsibilities

• Maintain and mature policies, processes, and procedures to protect data confidentiality, integrity, and availability.
• Grow the information security program to continuously reassess and mitigate risks.
• Own cloud security, security operations, app security, and GRC.
• Maintain SOC Type 2 and PCI-DSS compliance.
• Manage security across AWS and Azure cloud infrastructure.
• Serve as a technical mentor for security engineering.
• Lead technology diligence with customers and partners as we scale.
• Collaborate with product, software development, infra, and ops to meet security outcomes.

Skills

InfoSec leadership

Security governance

Cloud security

API-centric security

Communication skills

Education

Bachelor's in Computer Science or MIS

CISSP / CISM / CCSP

Tools

SOC 2

PCI-DSS

NIST CSF

ISO 27001

Job description

Seeking to hire a Senior Information Security Engineer that will operate a world class information security program. This role will be empowered to implement information security compliance processes and procedures while also being the subject matter expert in all-things information security. The Senior Security Engineer will establish, lead, and maintain the Information Security Management program comprised of policies, procedures, and systems to manage risks to its customers. This security leader will help maintain SOC 2 Type 2 and PCI-DSS compliance while expanding the use of standards like the NIST, CIS, and ISO27001. Candite will also serve as the point person on Information security calls with clients and help complete client due diligence request.

Key Responsibilities

• Maintain policies, processes, and procedures to protect the confidentiality, integrity, and availability of data and services.
• Mature the information security program to continually discover, reassess, and mitigate security risks as the business, product, and customer landscape changes.
• Ownership over cloud infrastructure security, security operations, application security, and GRC.
• Maintain compliance with industry control standards including SOC Type 2 and PCI-DSS.
• Manage security across all aspects of our cloud infrastructure (Amazon AWS, Microsoft Azure services)
• Serve as a technical mentor for security engineering.
• Manage program to complete technology diligence processes with our customer and partners as we scale.
• Partner with the product management, software development, infrastructure, and operations to ensure that achieves confidentiality, integrity, and availability outcomes for its products and services.

Qualifications

• 10 years of experience managing or leading information security functions.
• Experience managing information security control standards, including SOC2, PCI-DSS, NIST CSF, and ISO 27001.
• Experience working with products or businesses in FinTech, banking, financial services, other highly regulated sectors.
• Strong background in API-centric SaaS enterprise financial software.
• Consultative approach towards security with the ability to guide and educate developers on security best practices.
• Experience in security operations, incident response and managing security incidents
• Exceptional written and verbal communication skills.
• Bachelor’s degree in Computer Science or MIS.
• Relevant certifications (CISSP, CISM, CCSP), advanced degree, or equivalent experience preferred.