As the Security Director for our Services department, you will assume a critical leadership role in establishing security practices across our global operations. Your responsibilities will extend to educating internal teams and customers on the effective implementation of these crucial security measures.
You will be instrumental in communicating projects's risk status to senior leadership, providing recommendations for strategic improvements. This pivotal role demands a comprehensive understanding of diverse security disciplines, product security, risk management, and compliance, complemented by a strong understanding of engineering principles.
Furthermore, you will serve as the primary liaison with the CISO, contribute to the improvement and maintenance of our existing security framework, facilitate the establishment of robust security practices within the Services Security Chapter, and proactively address strategic planning and capacity considerations. This position implies close collaboration with project teams to ensure the seamless integration of security practices throughout the development lifecycle.
Reporting directly to the Vice President of Engineering and working in conjunction with our distinguished Expert Consulting team, you will function as the central point of contact for all security-related matters within our Services department.
Responsibilities
-
Strategic Security Leadership: Develop and implement a comprehensive security strategy for the Services department aligned with the overall organizational security objectives.
-
Global Security Oversight: Ensure consistent application of security policies, standards, and procedures across all Hubs within the Services department.
-
Risk Management: Support and lead the team to identify, assess, and evaluate security risks and vulnerabilities, and develop and implement effective mitigation strategies.
-
Customer Security Advocate: Serve as a point of contact for customers, providing clear explanations and supportive guidance regarding our security policies. Communicate confidently with customer stakeholders at all levels, fostering understanding and trust.
-
Compliance and Governance: Ensure adherence to relevant security regulations, frameworks, and customer contractual obligations.
-
Security Reporting and Communication: Prepare and present clear and concise security reports to senior management and other stakeholders
-
Security Practice Development: Establish and maintain security best practices, guidelines, and standard operating procedures within the Services Security Chapter.
-
Incident Response Management: Support the planning, execution, and post-incident analysis of security incidents within the Services department.
-
Stakeholder Collaboration: Act as the primary security point of contact for the company CISO and collaborate effectively with project, operations, and engineering teams.
-
Capacity and Planning: Proactively address security-related planning and capacity issues to ensure the Services department has the necessary resources and capabilities.
-
Knowledge Advancement: Strategically plan and approve travel and training opportunities for the Services security team to maintain cutting-edge knowledge of the evolving threat landscape and security technologies.
Qualifications
-
10+ years experience in information security
-
5+ years in a global leadership role
-
Exceptional ability to clearly communicate complex security matters to all levels, including senior executives and the board.
-
Master's degree in Computer Science, Information Security, or related field. Relevant certifications (e.g., CSSLP, CISM or others) are a strong plus.