Vice President IT Security and CISO

Description

The Vice President IT Security and CISO will oversee all security responsibilities for all Highgate global operations and subsidiaries. The position will require a technical understanding and a comprehension of modern security practices that involve both threat intelligence as well as credit card payment industry standards (PCI). Activities would include executive level security briefings, control of security training programs, governance of our PCI control program and developing and implementing best practices across all companies.

• Oversee internal audits and external assessments related to information security.
• Serve as the primary liaison for executive leadership on all matters related to IT security.
• Foster a culture of continuous improvement and security awareness across the organization.
• Collaborate with infrastructure and application teams to embed security into system design and deployment.
• Lead enterprise-wide risk assessments and mitigation planning.
• Build and mentor a high-performing security team.
• Lead forensic investigations and root cause analysis.
• Manage the Security Operations Center (SOC) and incident response protocols with our MSSP
• Set and measure performance objectives and provide regular feedback.
• Provide KPIs on performance of MSSP and internal controls
• Evaluate and implement security technologies including Microsoft Defender stack, Azure security tools, and M365 compliance features.
• Develop and execute a comprehensive cybersecurity strategy aligned with business goals.
• Monitor and respond to security threats, vulnerabilities, and breaches.
• Ensure compliance with regulatory requirements including PCI, GDPR, and other applicable frameworks.

Requirements

• Must have PCI control and framework experience
• “Hands-on” operating style and approach but a view towards the future and willingness to invest in people development and in developing an organization that will support a large company.
• Expertise in understanding sophisticated technology & applying it in a practical way to build solutions.
• Proven experience as a business-focused, change-driven, credible leader in a fast-growing business.
• Demonstrated ability in a combination of risk management, information security, and engineering roles.
• International Experience preferred
• QSA experience required
• Ability to identify, attract, hire, develop, and retain the best security professionals needed to staff a world class organization and ensure they have the vision, plan, support, and culture in place to deliver impact.
• Must have experience and knowledge of working with current PCI standards.
• 10+ years of security experience with 4+ years of senior leadership experience at the executive level.
• BS in Computer Science, Information Technology, Engineering, or related field.
• Previous experience with a multi-unit franchise model in either food service, hospitality, or retail strongly preferred.
• Knowledge of IT control frameworks with experience in implementation of the following examples (ISO, NIST, PCI, ITIL).
• Domain expert on the threat landscape and innovative security strategies and products.
• Current CISSP required

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance