Senior Information Security Program Lead

Harris Computer; Central City (KY); Sur place; USD 105 000 - 120 000; Plein temps

Avantages offerts par ce poste

Health benefits

Stock option program

Career development opportunities

Résumé du poste

Harris Computer seeks an Information Security Leader to drive a comprehensive security program for multiple client environments. You will guide strategy, policy, and governance, report on threats and incidents, and lead cross-functional teams to deliver secure solutions and resilient business continuity plans.

Required credentials include CISSP and strong experience across regulatory frameworks, audits, and data protection technologies.

Qualifications

• At least five years of information security leadership experience (e.g., CISO, vCISO, or senior security leadership).
• At least three years of experience in security operations, security engineering, vulnerability management, or system administration.
• Consulting or managed services experience supporting multiple clients across regulated industries (e.g., healthcare, financial services, government contracting).
• Hands-on experience implementing and operating controls for NIST, ISO/IEC 27001, HIPAA, SOC 2, or PCI DSS.
• Experience serving as the security point of contact during external audits and assessments (ISO/IEC 27001, SOC 2, PCI DSS, HIPAA).
• Experience scoping regulated systems and data, data classification and network segmentation.
• Knowledge of risk management frameworks and methodologies (NIST RMF, NIST SP 800-30, ISO 27005, ISO 31000, and FAIR).
• Experience with data protection technologies (encryption, tokenization, data loss prevention, secure coding).
• Must have CISSP certification.
• Highly preferred: CISM, CCSP, CGRC, PCI ISA, HCISPP, or CMMC CCP.
• Additional preferred: CRISC, CISA, CIPT.

Responsabilités

• Develops and manages information security programs that meet business, regulatory, and industry requirements.
• Advises executive leadership on information security strategy, policies, standards, and procedures.
• Updates client executives on security plan progress, emerging threats, and incidents.
• Develops and maintains security policies and procedures protecting client systems and data.
• Monitors security programs to keep controls effective and minimize risk.
• Oversees deployment of security solutions to improve overall posture.
• Develops, maintains, and coordinates DR and BC plans for client environments.
• Delivers and monitors security awareness training programs.
• Collaborates with cross-functional teams to deliver secure solutions.
• Leads or participates in client steering committees and working groups.
• Coordinates with client security teams on incident detection, response, and SLAs.
• Leads Risk & Compliance Support activities including audits and assessments.
• Conducts security reviews and recommends improvements to systems and controls.
• Defines scope and maintains segmentation and protection controls for regulated data environments.

Connaissances

Communication Proficiency

Decision Making

Project Management

Teamwork Orientation

Thoroughness

Client Relationship Management

Regulatory Compliance Expertise

Formation

Bachelor's degree in Computer Science, Information Systems, Network Security Engineering, or related field

Description du poste

Harris Computer seeks an Information Security Leader to drive a comprehensive security program for multiple client environments. You will guide strategy, policy, and governance, report on threats and incidents, and lead cross-functional teams to deliver secure solutions and resilient business continuity plans.

Required credentials include CISSP and strong experience across regulatory frameworks, audits, and data protection technologies.