Executive Director - Security, Privacy & Compliance

Phenom People•Ambler, PA

54d•$180,000 - $220,000

About The Position

At Phenom, our purpose is to help a billion people find the right work through our AI-powered talent experience platform. We are redefining the HR tech space by providing innovative solutions that enable companies to recruit, develop, and manage their employees more effectively. As a rapidly growing global organization with over 1,500 employees across 6 countries, we foster a culture of creativity and continuous innovation. We are looking for a highly motivated, experienced, and curious Executive Director, Security Privacy & Compliance. The ideal candidate would have knowledge of software security, data privacy, information security, application security, and regulatory standards for a SaaS platform. In this role, you will manage security programs, refine the current landscape and supervise the security & compliance team. You will also educate our employees and customers on Phenom's security framework.

Requirements

8+ years of experience in an information security role
Strong understanding of security tools, technologies, and policies
Strong Application Security background
A bachelor's degree in computer science, information systems, or a related field
In-depth knowledge and understanding of information risk concepts and principles as a means of relating business needs to security controls
Experience with compliance audits such as FedRAMP/FISMA and SOC 2/ISO
Experience with SSAE-18/SOC 2 and familiarity with ISO control mapping
Familiarity with security architecture and operational principles
Solid understanding of network protocols
Good understanding of GDPR, CCPA, Russia Data Privacy, and other global privacy regulations
Prior experience in working with C-level individuals on the client's side
Prior experience in application development (including Mobile) and SDLC processes is preferred
Professional ethical hacking experience using one or more of the following tools: Fortify On-Demand, Tenable IO, SOAPUI, HIDS, and NIDS, DLP Solutions
Excellent verbal, written, and interpersonal communication skills
Strong collaboration skills with the ability to positively influence and motivate teams
Ability to work in a fast pace environment with minimal supervision

Nice To Haves

Preferred Certifications (not required) - CISA, Certified Ethical Hacker, others in-app security and/or data privacy domain

Responsibilities

Perform continuous development, manage, and execute the information security and compliance program, the training program, and the internal and customer vulnerability management program
Ensure Phenom's security and compliance program is effective, efficient, and remains updated.
Manage the Information Security and Compliance team
Monitor security threat and risk management feeds for concerns; evaluate coordination options, determine trusted personnel and perform remediation as necessary
Monitor internal communication channels for indicators of security events or actions which have a possible security ramification, also enforce policy and procedure adherence
Manage FedRAMP program and update FedRAMP assessment and authorization documents
Manage assessments: SOC2, ISO, FedRAMP, NIST, etc.
Troubleshoot vulnerability scans
Address customer security survey requirements
Work with Sales Team - be the Lead in assisting regarding security & privacy
RFP & Proposals - contribute to technical sections of the RFPs and Proposals
Able to run application scans for various Phenom applications and work with development to remediate vulnerabilities
Completing risk assessments
Conduct Manual Pen Testing on complex applications
Apply ethical hacking standards to proactively identify issues
Perform periodic third-party Risk Assessments
Perform Internal Audits
Assist in regulatory accreditation processes