Director, IS Security

C&S Wholesale Grocers•Edison, NJ

2d•Onsite

About The Position

As a Director, IS Security you will be responsible for successfully implementing and maintaining security operations and security compliance policies, procedures and audit programs. This role is responsible for implementing and maintaining the installations of all security related applications, processes, and procedures and, communicating company policies related to information security. The Director will manage a team of offshore & onshore security workers to maintain a comprehensive information security program. The program will include the appropriate physical, technical, and administrative safeguards sufficient to protect C&S systems and C&S data (both on-premise and cloud) from unauthorized or unlawful destruction, loss, alteration, disclosure or access. The Director will need to work across infrastructure, business, and application teams to ensure the appropriate system, network, and application controls are in place and routinely monitored. The Director will also need to ensure that all team members are properly trained to support the security needs of C&S. Additionally, this role is also responsible for managing Oracle EBS Security for IT EBS Security Systems, supporting the design and implementation of all Oracle EBS Security and GRC systems, Oracle OCI security, Google Cloud Platform security, and network and system security.

Requirements

10-15 years of hands-on experience in Information security management.
5-7 years of Project Management
Experience managing a team of onshore and offshore resources
Bachelor's Degree - Information Security
Certified Information Security Manager (CISM)
Certified Information Systems Security Professional (CISSP)

Nice To Haves

Industry recognized certification preferred

Responsibilities

Manage onshore and offshore security team including delegating work assignments, performance reviews, and staff development.
Manage installations of security related applications, processes, procedures and equipment.
Manage an Information Security program with the appropriate physical, technical, and administrative safeguards based on the NIST Cybersecurity Framework (CSF), NIST SP:800-53, ISO 27001 or a similar standard for all systems managed by the C&S Information Services department.
Manage the security of C&S endpoints, including ensuring compliance with all C&S security controls and actively deploying routine upgrades and patches.
Plan and develop security initiatives to increase security awareness and reduce risk.
Partners with operational business functions to enable insight and understanding of security policies, initiatives and the audit program; functioning as a liaison among stakeholders to elicit, analyze, communicate and validate requirements for risk assurance, business controls, security and compliance.
Manage relationships with security software vendors and managed services providers.
Negotiate contracts, evaluate vendor performance, and ensure all contracts and periodically reviewed and accurately documented within the IT asset database.
Develop and maintain GRC and other Security Systems and provide a high level of service to internal and external auditors.
Ensure compliance with company security policies and directives.
Provide recommendations to improve best practices.
Work with other process teams, business analysts, and business process owners within Internal Audit, and Accounting/Finance to ensure alignment.
Work closely with the business to implement projects, including the development of plans, management of resources and deliverables in the Security applications portfolio.
Work with the business to ensure 3rd parties, SaaS and IaaS providers implement similar controls when handling or hosting C&S systems and data.