Deputy Chief Security Officer

American Fidelity•Oklahoma City, OK

2d•Onsite

About The Position

The Deputy Chief Security Officer integrates physical and technical security needs across AFA facilities, personnel, technical systems, and associated data. Working closely with the Chief Security Officer (CSO), the role helps establish and implement security strategy for headquarters, field offices, executive leadership, and Family residences. The Deputy serves as the CSO’s representative when the CSO is unavailable, including making decisions ordinarily made by the CSO. The position develops, implements, and reviews security policies, standards, and procedures; oversees adherence and compliance for facilities, personnel, and technical operations; and directs incident response for security-related situations. Security controls must support regulatory, Model Audit Rule (MAR), and SOC II Type 2 obligations, at a minimum. The Deputy provides leadership in security awareness and in managing colleagues responsible for technical and physical security functions. The role maintains current knowledge of threats, vulnerabilities, and mitigations; collaborates with the CSO on reports for senior leadership, stakeholders, Board Members, and others; routinely interacts with Cameron Entities, especially AFPC, and addresses Family and Family Office needs; and assists with overall security budget considerations. Candidates must reside in the Oklahoma City area by their start date. This is an on-site position requiring in-office work five days per week.

Requirements

7–10 years of experience.
Extensive knowledge of technical and physical security and risk management for organizations, individuals, technology, and data, including integration of technical and physical security tools and practices.
Demonstrated ability to manage personnel and programs addressing organizational governance and security.
Knowledge and experience in incident management and response.
Familiarity with Governance, Risk, and Compliance (GRC) in support of physical and technical security.
Strong Microsoft Office product knowledge, including PowerPoint and SharePoint.
Strong security awareness and ability to protect organizational value by keeping information confidential.
Demonstrated ability to interact and liaise with outside agencies, including law enforcement organizations, as needed.
Working knowledge of software and/or process automation.
Must reside in the Oklahoma City area by the start date.
Must work on-site in the office five days per week.

Nice To Haves

Bachelor’s degree from a four-year college or university in Information Security, Computer Science, MIS, Mathematics, Engineering, Physics, or another science; commensurate work experience is acceptable in lieu of a degree.

Responsibilities

Integrate physical security needs with technical security needs across facilities, personnel, systems, and data.
Work with the CSO to establish and implement security strategy for AFA facilities, executive leadership, Family residences, and personnel.
Represent the CSO and make decisions usually made by the CSO when the CSO is unavailable.
Develop, implement, and review security policies, standards, and procedures.
Establish and oversee adherence to security controls and compliance for facilities, personnel, and technical operations, including regulatory, MAR, and SOC II Type 2 obligations.
Direct and manage incident response for security-related situations.
Lead efforts to educate colleagues and promote physical and technical security awareness and adherence throughout the organization.
Lead colleagues involved in technical and physical security functions.
Maintain current knowledge of security threats, vulnerabilities, and mitigations.
Collaborate with the CSO to prepare and present security reports to senior leadership, stakeholders, Board Members, and others.
Interact with Cameron Entities, particularly AFPC, and address Family and Family Office security needs.
Assist with overall security budget considerations.
Liaise with outside agencies, including law enforcement organizations, as needed.