Director Of Security Policy And Business Projects Consulting

Financial Services



The Policy, Awareness and Business Projects team is responsible for maintaining Information Security policy, communicating key security concepts and expected behaviors to all employees and non-employees and providing security guidance and enforcement to ensure security is appropriately built into new/existing products.



Security Policy Management
Regularly review corporate information security policies against industry/business trends and manages policy updates through review and approval processes
Works closely with the Architecture and Standards team to develop security standards, which support policy

Awareness Program and Communications
Develops Information Security awareness campaigns, which keep key security issues and expected behaviors top of mind for all employees and non-employees
Coordinates awareness messages with Corporate Affairs, Legal, Corporate Security and IT Communications for messaging content and tone
Manages the annual security compliance training and testing program
Manages emergency communications regarding urgent situations

Program Governance
Identifies and coordinates enforcement actions for systems and business practices which are non-compliant with policy
Works across Information Security teams to ensure all program objectives are defined and performance is measured
Provides information and support to the Corporate Information Security Committee

Business Infrastructure Projects
Provides security participation and advice throughout project lifecycles to ensure security issues are identified and remediation is budgeted/planned for new products and services comply with Information Security policy and standards and any security policy gaps identified and closed
Advises IT and Business groups on best security practices and serves as the Information Security point of control for communication and issue resolution

Administrative
Administratively manage team personnel and finances, continuously develops and optimizes/improves processes, develops process measures and controls, tests reports on process controls, integrates with IT and Corporate control and Compliance processes


10+ years Information Security, Technology Audit, IT Compliance or IT Management experience in a medium to large scale / complexity company
Demonstrated experience building and improving programs within responsibility areas described above
Current understanding of best practices, management techniques and industry trends within responsibility areas described above
Superior communication and influence skills, ability to gain agreement and support at all levels in the organization
Demonstrated ability to present program performance metrics and results to senior management
Excellent knowledge of Financial Services Compliance environment including; Sarbanes-Oxley, SAS-70, GLBA, HIPPA, and SEC guidance
Experience in vendor management and negotiation
CISSP, CISA and/or CISM a plus
Six Sigma or other process development skills a plus

PLEASE APPLY USING THIS BUTTON ONLY