Sr Dir IT Risk & Compliance

Hertz•Roswell, GA

11h•$200,000

About The Position

Sr. Director, Information Security is responsible for maintaining the company’s corporate and cloud information compliance and supporting security strategies as well as aiding in a best-in-class Information Security program with minimal impact to the business. Sr. Director, Information Security will review current data security policies, identify new and existing areas of risk, and develop new data security policies and controls that are aligned with IT and business objectives as well as domestic and international regulatory requirements. This role will manage SOX, PCI, ISO, and other regulatory requirements. We expect the starting salary to be around $200,000. The actual salary will be determined based on years of relevant work experience.

Requirements

10+ years IT, Information Security, Audit, Security Compliance and/or Control experience.
5 years of leadership experience in managing multiple, large, cross-functional teams or projects, and influencing senior level management and key stakeholders.
Bachelor’s degree required
Experience with multiple operating systems and/or security tools.
Experience with Security architecture and models
Experience handling IT incidents
Knowledge/experience with the latest IT security, control, and audit technologies and standards.
Knowledge of general societal, legal and regulatory issues related to information protection
Knowledge of IT Infrastructure and Processes (e.g. network, application development, change control, service desk, web design)
Must be able to handle adversarial and sensitive situations with tact and diplomacy
Must be able to leverage resources from different organizations to achieve security/control compliance
Ability to create synergy between ITSS and our business partners and other organizations
Excellent verbal and written communication skills to effectively communicate with all levels of management; including presentations to Executive Management
Excellent collaboration, problem solving and project management skills
Excellent analytical and problem-solving skills
Excellent organizational, leadership and delegation skills
Must have the ability to lead with vision/strategic leadership
Ability to collaborate with internal and external stakeholders across multiple functions and locations
Flexible and adaptable; ability to work effectively in ambiguous situations
Results driven, ability to make decisions and help solve problems
Ability to work under minimal supervision with a goal-oriented mindset.
Courageous leadership and accountability.

Nice To Haves

Security and /or audit certification is preferred.

Responsibilities

Aid in development and maintenance of Global IT Security Strategies; ensure security technology integration is maintained across all corporate and cloud computing resources.
Provide and support strategic vision that enables innovation and seeks to leverage IT trends that can create business value consistent with the company's requirements and expectations.
Maintain an understanding of business operations and determine efficient cost-effective methods to leverage business and security requirements. Recommend cost effective security measures.
Work with enterprise IT leadership to ensure there is a convergence of business, technical and security requirements that are highly scalable and redundant.
Ensure IT Security practices are in compliance with global laws and regulations.
Support and oversee Vendor and Customer Risk Assessments.
Provide support and guidance for legal and regulatory compliance efforts (SOX, PCI, ISO, GDPR).
Define and maintain metrics and reporting strategies that effectively communicate successes and progress of the security program.
Oversee Security Awareness program, including communications and training.
Provide and support Governance & Risk (GR) program.
Contribute to institution-wide information security governance processes, participate on "Information Security Advisory Committee" and be a leader in the establishment of an information security program and project priorities.
Assist CISO in establishing annual and long-range security and compliance goals, define corporate and cloud security strategies, metrics, reporting mechanisms and program services; and create maturity models and a roadmap for continual program improvements.