Vice President IT Security and CISO

Description

• Oversee internal audits and external assessments related to information security.
• Serve as the primary liaison for executive leadership on all matters related to IT security.
• Foster a culture of continuous improvement and security awareness across the organization.
• Collaborate with infrastructure and application teams to embed security into system design and deployment.
• Lead enterprise-wide risk assessments and mitigation planning.
• Build and mentor a high-performing security team.
• Lead forensic investigations and root cause analysis.
• Manage the Security Operations Center (SOC) and incident response protocols with our MSSP
• Set and measure performance objectives and provide regular feedback.
• Provide KPIs on performance of MSSP and internal controls
• Evaluate and implement security technologies including Microsoft Defender stack, Azure security tools, and M365 compliance features.
• Develop and execute a comprehensive cybersecurity strategy aligned with business goals.
• Monitor and respond to security threats, vulnerabilities, and breaches.
• Ensure compliance with regulatory requirements including PCI, GDPR, and other applicable frameworks.

Requirements

• Must have PCI control and framework experience
• “Hands-on” operating style and approach but a view towards the future and willingness to invest in people development and in developing an organization that will support a large company.
• Expertise in understanding sophisticated technology & applying it in a practical way to build solutions.
• Proven experience as a business-focused, change-driven, credible leader in a fast-growing business.
• Demonstrated ability in a combination of risk management, information security, and engineering roles.
• International Experience preferred
• QSA experience required
• Ability to identify, attract, hire, develop, and retain the best security professionals needed to staff a world class organization and ensure they have the vision, plan, support, and culture in place to deliver impact.
• Must have experience and knowledge of working with current PCI standards.
• 10+ years of security experience with 4+ years of senior leadership experience at the executive level.
• BS in Computer Science, Information Technology, Engineering, or related field.
• Previous experience with a multi-unit franchise model in either food service, hospitality, or retail strongly preferred.
• Knowledge of IT control frameworks with experience in implementation of the following examples (ISO, NIST, PCI, ITIL).
• Domain expert on the threat landscape and innovative security strategies and products.
• Current CISSP required

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance