AVP, Data Security & Protection

Crum & Forster • Morristown, NJ

11h • $149,000 - $200,000

About The Position

The Cyber & Information Security Assistant Vice President (AVP) - Data Security & Protection will report directly to the CISO. In this position, you will be responsible for developing policies, procedures, and standards for protecting C&F data in accordance with the latest security threats and regulatory requirements. This position will collaborate across all business divisions to ensure the efficient and effective implementation of this program, maintaining data security standards throughout the data lifecycle.

Requirements

• Bachelor’s degree or equivalent and 10+ years in a Data Security focused role.
• Subject Matter Expertise in Data Security technologies.
• Understanding of cybersecurity and data privacy laws and regulations such as NYDFS, CCPA, and GDPR.
• Experience designing and implementing data security solutions in enterprise environments.
• Experience with various structured and unstructured data stores both on-premise and cloud native.
• Requires good interpersonal skills, ability to function in a fast paced, short-deadline environment, and the ability to come up with innovative cost-effective decisions.
• Written and verbal English communication skills.
• Will abide by departmental policies and procedures, including authority levels, to comply with C&F’s risk management controls.

Nice To Haves

• 15+ years of Information Security experience preferred.

Responsibilities

• Serve as the Subject Matter Expert for data security throughout the business.
• Conduct Data Risk Assessments to identify potential threats and vulnerabilities impacting company data, as well as ensuring adherence to cybersecurity and data regulations.
• Develop and maintain data security policies, procedures, and standards aligned with industry standard data governance and protection frameworks and ensure they are followed throughout the organization.
• Develop and lead management of data inventories, data flows, and data sharing controls.
• Facilitate the design and implementation for enhanced data access controls, supporting a Role-Based Access program.
• Implement and support data retention and data destruction program.
• Advise and coordinate with the Security Operations team to implement technology and playbooks for Data Loss Prevention.
• Validate and enforce the deployment of encryption for data at-rest and in-transit.
• Lead and mentor a team of engineers that will work closely with stakeholders and data owners to enforce data protection standards.
• Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
• Adhere to all C&F policies, procedures, and standards, within budgetary specifications, including time management, supply management, productivity, and accuracy of practice.

Benefits

• Competitive compensation package
• Generous 401K employer match
• Employee Stock Purchase plan with employer matching
• Generous Paid Time Off
• Excellent benefits that go beyond health, dental & vision. Our programs are focused on your whole family’s wellness, including your physical, mental and financial wellbeing
• A core C&F tenet is owning your career development, so we provide a wealth of ways for you to keep learning, including tuition reimbursement, industry-related certifications and professional training to keep you progressing on your chosen path
• A dynamic, ambitious, fun and exciting work environment
• We believe you do well by doing good and want to encourage a spirit of social and community responsibility, matching donation program, volunteer opportunities, and an employee-driven corporate giving program that lets you participate and support your community

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees