Sr Dir IT Risk & Compliance. Atlanta Move Collective

Sr. Director, Information Security is responsible for maintaining the company's corporate and cloud information compliance and supporting security strategies as well as aiding in a best-in-class Information Security program with minimal impact to the business. Sr. Director, Information Security will review current data security policies, identify new and existing areas of risk, and develop new data security policies and controls that are aligned with IT and business objectives as well as domestic and international regulatory requirements.

This role will manage SOX, PCI, ISO, and other regulatory requirements.

We expect the starting salary to be around $200,000. The actual salary will be determined based on years of relevant work experience.

• Aid in development and maintenance of Global IT Security Strategies; ensure security technology integration is maintained across all corporate and cloud computing resources.

• Provide and support strategic vision that enables innovation and seeks to leverage IT trends that can create business value consistent with the company's requirements and expectations.

• Maintain an understanding of business operations and determine efficient cost-effective methods to leverage business and security requirements. Recommend cost effective security measures.

• Work with enterprise IT leadership to ensure there is a convergence of business, technical and security requirements that are highly scalable and redundant.

• Ensure IT Security practices are in compliance with global laws and regulations.

• Support and oversee Vendor and Customer Risk Assessments.

• Provide support and guidance for legal and regulatory compliance efforts (SOX, PCI, ISO, GDPR).

• Define and maintain metrics and reporting strategies that effectively communicate successes and progress of the security program.

• Oversee Security Awareness program, including communications and training.

• Provide and support Governance & Risk (GR) program.

• Contribute to institution-wide information security governance processes, participate on "Information Security Advisory Committee" and be a leader in the establishment of an information security program and project priorities.

• Assist CISO in establishing annual and long-range security and compliance goals, define corporate and cloud security strategies, metrics, reporting mechanisms and program services; and create maturity models and a roadmap for continual program improvements.

• 10+ years IT, Information Security, Audit, Security Compliance and/or Control experience.

• 5 years of leadership experience in managing multiple, large, cross-functional teams or projects, and influencing senior level management and key stakeholders.

• Bachelor's degree required

• Security and /or audit certification is preferred.

• Experience with multiple operating systems and/or security tools.

• Experience with Security architecture and models

• Experience handling IT incidents

• Knowledge/experience with the latest IT security, control, and audit technologies and standards.

• Knowledge of general societal, legal and regulatory issues related to information protection

• Knowledge of IT Infrastructure and Processes (e.g. network, application development, change control, service desk, web design)

• Must be able to handle adversarial and sensitive situations with tact and diplomacy

• Must be able to leverage resources from different organizations to achieve security/control compliance

• Ability to create synergy between ITSS and our business partners and other organizations

• Excellent verbal and written communication skills to effectively communicate with all levels of management; including presentations to Executive Management

• Excellent collaboration, problem solving and project management skills

• Excellent analytical and problem-solving skills

• Excellent organizational, leadership and delegation skills

• Must have the ability to lead with vision/strategic leadership

• Ability to collaborate with internal and external stakeholders across multiple functions and locations

• Flexible and adaptable; ability to work effectively in ambiguous situations

• Results driven, ability to make decisions and help solve problems

• Ability to work…