Senior Information Security Officer

Kiteworks•,

6d•$70,000 - $85,000•Hybrid

About The Position

As a Senior Information Security Officer, you will be part of the global security and compliance team, responsible for corporate security, including IT and cloud security, as well as the full compliance program of Kiteworks. Given that Kiteworks sells secure communication and collaboration products, security and compliance are paramount. The company holds numerous security certifications and assurance reports, and as it expands into new jurisdictions, it will need to acquire more. As a senior member of the team, you will report directly to the Global IT CISO and are expected to work independently and lead team projects. This role involves managing multiple tasks simultaneously, including running audits, performing gap or threat analyses, and responding to customer inquiries. You will also champion security improvement initiatives, such as access management and software development, collaborating with IT and development teams. Kiteworks operates at a fast pace, and the team's objective is to manage risk while supporting business growth, especially with the secure adoption of AI. The ideal candidate is a pragmatic problem solver who identifies risks, proposes mitigations, and executes solutions, with an emphasis on efficiency over bureaucracy.

Requirements

At least 5 years' experience in information security and compliance
Experience with ISO 27001 and information security management systems
Experience with BSI C5 or SOC 2
Experience with audits
Experience with risk analysis
Experience with identity and access management
Knowledge of the GDPR and privacy legislation
Affinity with IT and software development
Affinity with AI
Pragmatic problem-solving skills
Ability to work independently
Collaboration skills
Fluent in English
Ability to meet Kiteworks, customer, and/or government security screening requirements for this role
Passing the Kiteworks background check upon hire/transfer and every two years thereafter

Nice To Haves

Experience in a tech company is highly preferred

Responsibilities

Taking ownership of external security audits such as ISO 27001, BSI C5, and SOC 2
Performing gap analysis and implementing new security frameworks and standards
Keeping information security procedures up to date across departments
Acting as full domain owner for at least the identity and access management and supplier management domains
Executing control tasks, for example access checks, supplier reviews, and internal audits
Using AI to automate recurring tasks
Coordinating with control owners to support timely execution of their tasks
Implementing security improvement projects, for example in IT or software development
Handling security incidents
Taking part in the weekly security meeting and flagging new risks and opportunities
Answering questions on security and privacy from customers, prospects, and colleagues
Onboarding newly acquired companies to the global security and compliance program