Information Security Lead

SCOR•Rotterdam, NY

2d•Hybrid

About The Position

The Information Security Lead is responsible for managing the security and compliance function for Velogica US, ensuring that data, systems, cloud environments, development practices, vendors, and assurance activities are protected, controlled, and audit ready. The role will operate as the local senior security and compliance lead for Velogica US, partnering closely with the SDS Global Security and Compliance team to align local execution with the broader SDS security and assurance teams’ roadmap. The position combines hands-on technical security knowledge with strong GRC capability, including SOC 2, ISO 27001 compliance, risk management, vulnerability management, third-party assurance, client security reviews, evidence management, and policy/control lifecycle management. The role will also help standardize and harmonize controls, evidence practices, tooling, and assurance processes between SDS and Velogica US, while maintaining effective local support for Velogica stakeholders and clients.

Requirements

Bachelor’s degree in computer science, Information Security, Cybersecurity, Information Systems, Engineering, Risk Management, Mathematics, Business Technology, or a related field; equivalent practical experience may be considered.
One or more relevant professional certifications is strongly preferred, such as CISSP, CISM, CRISC, CCSP, ISO 27001 Lead Implementer, GIAC security management certifications, or equivalent recognized security, cloud, or risk management certification.
At least 7 years of progressive experience across information security, security engineering & operations or a closely related discipline; candidates with slightly fewer years may be considered where they demonstrate strong hands-on technical depth.
Demonstrated experience with recognized security and assurance frameworks such as SOC 2 Type II, ISO 27001/27002, NIST CSF, CIS Controls, COBIT, or equivalent control frameworks, including practical control design, implementation, evidence collection, and remediation tracking.
Hands-on technical security experience across cloud platforms (Azure, GCP)
Experience working closely with multiple stakeholders to translate security and compliance requirements into practical operating controls.
Experience managing client-facing assurance activities, including security questionnaires, due diligence requests, audit evidence requests, contractual security requirements, recurring client reviews, and customer assurance discussions.
Strong ability to operate independently as a senior individual contributor, manage competing priorities, influence stakeholders without direct authority, make risk-based recommendations, and escalate material decisions appropriately.

Nice To Haves

Master’s degree in Cybersecurity, Information Systems, Risk Management, Business Administration, or a related discipline is advantageous but not required.
Additional certifications or training in cloud security, business continuity, security management, AI/LLM security, secure software development, DevSecOps, or control testing are considered a plus.
Experience supporting control harmonization, security integration, assurance standardization, operating model alignment, or related Security M&A/post-integration activities across entities, offices, regions, or business units, preferred.
Experience in insurance, reinsurance, regulated financial services, SaaS, underwriting technology, health/medical data environments, or other client-assurance-heavy sectors, preferred.

Responsibilities

Operate as the local lead for Velogica US security and compliance activities, managing day-to-day priorities independently while maintaining close alignment with the SDS Global Security and Compliance team.
Develop, maintain, implement, and improve Velogica security and compliance policies, standards, procedures, guidelines, controls, technical safeguards, and evidence practices in alignment with SDS Global Security and Compliance team-defined control baselines.
Lead and coordinate Velogica US assurance activities, including SOC 2 Type II, ISO 27001 alignment, audit preparation, evidence collection, control owner coordination, audit remediation, and ongoing control monitoring.
Harmonize IT security and assurance practices between SDS and Velogica US by implementing common control baselines, repeatable processes, shared tooling, consistent evidence standards, and aligned reporting.
Provide hands-on technical security guidance across cloud environments, application security, DevSecOps, AI/LLM risk management, vulnerability management, access control, logging/monitoring, incident response, business continuity, and secure SDLC practices.
Work with engineering, cloud, infrastructure, data, product, legal, HR, vendor management, privacy, and business stakeholders to ensure security and compliance requirements are embedded into operating practices and delivery processes.
Manage client-facing security and compliance activities, including client security questionnaires, due diligence requests, evidence requests, periodic reviews, and assurance discussions.
Coordinate penetration tests, security reviews, remediation plans, and status reporting in a risk-based and audit-defensible manner.
Support critical incident response planning, investigation coordination, lessons learned, and corrective actions, including on-call availability for emergency information security analysis or corrective action when required.
Maintain operational documentation, control evidence, decision records, risk registers, issue logs, and management reporting to an audit-ready standard.

Benefits

Medical, vision, and dental coverage
401(k) Plan with a competitive match
Company-funded Defined Contribution Retirement Program
Life and AD&D insurance
Long- and Short-Term Disability
Flexible Parental Leave
Unlimited Sick Days
Volunteer Time
Summer Fridays
Learning & Development Resources
Personal Wellness Tools and Rewards
Competitively priced gym memberships from a large nationwide network of gym brands and local fitness studios
Relocation assistance within the U.S. is available for this position.