ServiceMac-CISO

First American•Usa, SC

About The Position

Functions as the senior-most Information Security leader for ServiceMac, accountable for translating enterprise security strategy into operational execution and providing ongoing visibility into security risks, control effectiveness, and program maturity to executive leadership. Operates within First American enterprise security governance while ensuring ServiceMac security posture aligns with business objectives, regulatory expectations, and corporate standards. Responsible for developing, designing, and executing the ServiceMac Information Security Program to ensure protection of information assets and alignment with regulatory, legal, and enterprise risk requirements. Provides long-term solutions to Information Technology needs, including protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.

Requirements

BA/BS degree in Computer Information Systems, Computer Science or equivalent experience required.
5+ years of technical experience as a senior contributor.
8+ years of management experience including 3–5 years of director-level experience.
Knowledge of security and control frameworks such as NIST, ISO, COBIT, and related enterprise governance models, and the ability to apply those frameworks within a business-aligned operating model.
Ability to translate enterprise Information Security strategy into actionable ServiceMac programs, measurable outcomes, and risk-based priorities.
Demonstrated understanding of Information Security, cyber risk management, and regulatory expectations applicable to financial services environments and mortgage servicing operations.
Successful track record designing, developing and executing critical complex projects in more than one area of functional expertise.
Proven thought leadership and innovation in the areas of: process envisioning, operational effectiveness, work process efficiency and metrics.
Ability to establish and maintain effective working relationships at the senior management level across functional groups, business units, and vendor organizations.
Ability to change the thinking of, or gain acceptance from, others in sensitive situations, using influence and preventing damage to the relationship.
Strategic Management: Ability to communicate function vision and establish aligned direction and goals for his/her department. Obtains and effectively allocates resources. Creates systems to measure results. Has in-depth understanding of competitor, financial and industry dynamics.
Team Development: Actively recruits, retains and develops talent and holds employees accountable for results. Translates vision into action, leads change, and inspires people to get results.
Ethics: Deals with others in an honest manner, assures adherence to company policies, and addresses questionable business practices.
Customer Focus: Drives and models customer loyalty, manages customer expectations, uses customer feedback to establish department goals, and ensures commitments are met.
Communication: Provides others with reliable information, delivers informative and persuasive presentations. Uses good listening skills and negotiates effectively.

Nice To Haves

Training courses, seminars, certifications or other security related education experience preferred.
Security certifications such as CISSP, CISM, or CISA preferred.

Responsibilities

Leads the ServiceMac Information Security function with accountability for strategy, execution, and performance of security programs.
Establishes and maintains a comprehensive Information Security Program aligned with enterprise policies and regulatory requirements.
Serves as primary security advisor to executive leadership.
Ensures alignment with corporate security policies while tailoring implementation to business operations.
Maintains regulatory awareness and ensures proper controls and reporting structures are in place.
Oversees threat and vulnerability management, control implementation across infrastructure, applications, identity, and data security, and ongoing validation through testing and assessments.
Oversees incident response planning and serves as escalation point for major security events.
Provides security architecture guidance for business and IT initiatives, ensuring alignment with enterprise standards.
Leads security awareness initiatives and promotes strong security culture.
Oversees third-party risk in coordination with enterprise programs.
Manages team, budgets, and resources and ensures delivery of security objectives.
Interfaces regularly with executive leadership and enterprise stakeholders.
Supports regulatory inquiries, audits, and enterprise initiatives.