Senior Information Security Program Lead

Harris Computer

Phoenix (AZ)

In loco

USD 105.000 - 120.000

Tempo pieno

7 giorni fa

Candidati tra i primi

Aumenta le possibilità di ricevere una risposta da questo datore di lavoro

Il tuo curriculum e una lettera di presentazione personalizzati, che corrispondono esattamente a ciò che sta cercando.

Supera i filtri ATS

Vantaggi offerti da questo lavoro

Health benefits

RRSP matching

Stock options

Career development opportunities

Descrizione del lavoro

Harris Computer seeks a senior information security leader to drive security programs for client environments, aligning with regulatory and industry requirements. You will advise executives, develop policies, and oversee risk assessments and audits to strengthen confidentiality, integrity, and availability of client data.

The role requires extensive experience in security leadership, operations, and compliance, with a track record in regulated industries.

Competenze

At least five years of information security leadership experience (e.g., CISO, vCISO, or senior security leadership).
At least three years of experience in security operations, security engineering, vulnerability management, or system administration.
Consulting or managed services experience supporting multiple clients across regulated industries (healthcare, financial services, government contracting).
Experience implementing and operating controls for frameworks such as NIST, ISO/IEC 27001, HIPAA, SOC 2, or PCI DSS.
Experience serving as security point of contact during external audits/assessments (ISO/IEC 27001, SOC 2, PCI DSS, HIPAA).
Experience scoping regulated systems and data, identifying required controls, and reducing scope via data classification and network segmentation.
Knowledge of risk management frameworks (NIST RMF, NIST SP 800-30, ISO 27005, ISO 31000, FAIR) with experience applying them to risk assessment and treatment.
Experience with data protection technologies (encryption, tokenization, data loss prevention, secure coding).

Mansioni

Lead security program leadership and operations for clients.
Develop and implement information security programs meeting business, regulatory, and industry requirements.
Advise executive leadership on information security strategy, policies, standards, and procedures.
Update client executives on security plan progress, threats, and incidents.
Develop and maintain security policies and procedures for confidentiality, integrity, and availability of client systems and data.
Monitor client security programs to keep controls effective and risks minimized.
Oversee implementation of security solutions to improve overall posture.
Coordinate testing of disaster recovery and business continuity plans.
Deliver and monitor security awareness training programs.
Work with cross-functional teams to develop and deliver secure solutions.
Lead or participate in client steering committees and working groups.
Coordinate with client security teams on incident detection, response, and resolution within SLAs.
Lead internal, vulnerability, and third-party risk assessments and support client audits.
Conduct security reviews of systems and recommend improvements to policies and procedures.
Ensure safeguards protect client systems and information.
Advise clients on control requirements for frameworks and regulations (NIST, ISO, HIPAA, SOC 2, PCI DSS).
Assess control gaps and maturity, help prioritize remediation.
Support client audits, assessments, and certifications by clarifying controls and evidence.