Information Security Director

TTEC•Austin, TX

About The Position

The Director of Information Security is responsible for security and privacy compliance, security policy and procedures, assessments of systems and networks, incident response, and the evaluation of applications and network devices. The role works closely with Legal and the IT department to maintain and proactively monitor core infrastructure, including Cisco and Oracle products, Microsoft Windows, and Linux/Unix servers. The director makes recommendations to maintain and improve IT security, handles sensitive and confidential data, and serves as a company-wide liaison to promote, educate, and ensure compliance with IT security requirements.

Requirements

At least three years of professional experience designing, implementing, and managing enterprise IT security.
Thorough understanding of IT security and privacy laws, regulations, and compliance, including forensics, SOX, PCI, and HIPAA.
Ability to perform security assessments of technical environments or work with others to execute them.
Effective written and verbal communication skills, including the ability to prepare and present IT-related material to varied audiences, including non-technical executives and management and occasionally large groups.
Successful project management experience.
Understanding of concepts relating to Identity Management.
Experience developing, reviewing, administering, and implementing security policies.
B.A. or B.S. degree required.
Security certifications such as CISSP (ISC2), CISA, CISM, GIAC Information Security Officer (GISO), and/or GIAC Security Essentials Certification (GSEC).

Nice To Haves

SAS70, eDiscovery, or COBIT/ISO experience.
Advanced degree preferred.
Experience within an outsourced (BPO) Contact Center environment would be ideal.

Responsibilities

Comprehend and enforce applicable IT security and privacy laws, regulations, and compliance requirements, working closely with Legal.
Design and implement security policies and procedures.
Work with the IT department to maintain and proactively monitor core infrastructure, including Cisco and Oracle products, Microsoft Windows, and Linux/Unix servers.
Lead security assessments of systems, applications, and networks in a complex IT environment.
Recommend products and procedures to maintain and improve IT security.
Lead security incident response.
Participate in evaluating current and future applications and network devices.
Handle sensitive and confidential data.
Act as a liaison with the company to promote and educate employees about IT security and ensure compliance.
Coordinate incident response with internal and external organizations, including IT, Legal, internal audit, operations, executive management, and local and federal authorities as needed.