Chief Information Security Officer

Deluxe•Atlanta, GA

21h

About The Position

Customers entrust Deluxe with some of their most valuable financial data, and as such, security is of utmost importance. The key responsibility of the role is establishing and maintaining a global information security program to adequately protect company and customer information assets and to meet Audit and client security requirements, and proactively creating prevention programs from attackers. The CISO will build upon the existing security frameworks in connection with the emerging cyber industry trends, and mature the program as the company advances its technology modernization efforts and contends with an increasingly complex threat environment and regulatory landscape.

Requirements

Bachelor’s and 10 years or Master’s and 8 years, 7 years of Management.
Experience managing regulatory and compliance policies.
Experience developing information security protection goals, objectives, and metrics consistent with corporate strategic plans.
Must be 18 years of age or older

Nice To Haves

Masters Degree in Computer Science or Information Technology
10 years in security frameworks and standards

Responsibilities

Continually evolve and implement world class Information Security program across AppSec, InfoSec, and CorpSec to protect Customer Information, Regulatory and Compliance expectations, and protecting company and customers assets from external Attackers.
Partner with technology and business leaders across the company to develop and implement sufficient proactive controls to limit the risk of internal or external attacks.
Build, leverage and grow world-class security teams by continually bringing External Perspectives from various Industry and Regulatory Security Forums, and with thoughtful intention towards diversity and inclusion.
Develop and build talent necessary to bring innovative solution. Talent strategy includes evaluating current teams, putting together strategies and plans to train, upskill existing teams as well as bring in new talent, building a talent bench strength through dynamic succession plans with focused talent development and career pathing.
In partnership with Chief Compliance Office, evolve and ensure ongoing company compliance including exposure to controls around the Service Organization Control 1 and 2 (SOC 1 /SOC 2), NIST 800-30, ISO 27001, Payment Card Industry Security Standards (PCI), Health Insurance Portability and Accountability Act (HIPAA), California Consumer Privacy Act (CCPA), Cloud Security Alliance (CSA), Consumer Financial Protection Bureau (CFPB), Federal Financial Institution Examinations Council (FFIEC) and various other laws and regulations including Executive Orders.
Work directly with the Revenue Business Units to facilitate Information Security and availability risk assessment and risk management processes and works with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.
Responsible for identifying, evaluating and reporting on information security risks in a manner that meets company and client needs compliance and regulatory requirements.
Provide regular reporting on the current status of the information security program to enterprise risk teams, senior business leaders and the board of directors as part of a strategic enterprise risk management program.
Interact with the Board of Directors, Executive Leadership Team, Risk & Compliance and Privacy teams, as well as Clients and Prospects as required.
Oversees all technology risk management activities and acts as an advocate for all information security and business continuance best practices.
Serves as process owner of ongoing activities related to the availability, integrity and confidentiality of customers, business partners, employees and business information, in compliance with the organizations information security policies.