Head of IT Security - #2999

Wade Trim•Detroit, MI

1d•Hybrid

About The Position

We are looking for a Head of IT Security to join our IT Team to improve infrastructure in our Detroit office. The candidate must have a bachelor's degree in Information Technology with a focus on Cybersecurity or a closely related field with at least 15 years of related experience. Candidates should also have strong leadership and project management skills, with the ability to manage and manipulate multiple and shifting priorities. A flexible hybrid-remote work schedule is available after 30 days of employment.

Requirements

Bachelor's degree in Information Technology with a focus on Cybersecurity or a related field.
At least 15 years of related experience.
Strong leadership and project management skills.
Ability to manage and manipulate multiple and shifting priorities.
Maintain a high level of technical subject matter expertise.
Working knowledge of Server Infrastructure in a Windows Server environment
Vast familiarity with Networking concepts to guide current Network team security improvement efforts
Professional yet patient when driving IT Security awareness and enforcing policy throughout the organization

Nice To Haves

Certifications in CISA, CISM, or CISSP preferred.

Responsibilities

Monitor all enterprise components for security threats and address any incidents.
Build security best practices to strengthen the organization's security posture.
Provide guidance to all internal IT teams to identify and remediate security gaps.
Build security considerations into a developing Business Continuity plan.
Maintain all security tools and technologies and introduce new relevant tools.
Monitor policy compliance as the organization adopts NIST 800-171 guidelines.
Work company-wide to reduce risk and ensure security awareness and prominence.
Create and audit policies and controls while continuously striving for improvement.
Create a security incident response program within IT then extend it enterprise wide.
Regularly report security incidents and security program progress to the V.P. of IT.
Develop and mature a company-wide Governance, Risk, and Compliance (GRC) program in partnership with the existing GRC Analyst, including practical security policies, risk registers, control ownership, evidence collection, audit readiness, vendor/security reviews, and executive-level reporting aligned to NIST 800-171 and business requirements.
Ensure compliance to all relevant Information Security controls required by local laws, regulations, and contracts.
Maintain a safe working environment.