Manager, Business Information Security

Position overview

Position holds the role of the Manager, Business Information Security for PFSNA affiliates, coordinating activities and compliance as identified by Porsche AG’s Global Corporate Information Security Officer. Position leads information security governance for PFSNA in coordination with PCNA Infosec team. This includes directing the processes and procedures that pertain to information security and the group information security directives.

The Business Information Security Manager would take on the tasks of ensuring data confidentiality, integrity, availability and authenticity. This will include vendor management, risk assessment, regulatory compliance and reporting. She/he would need to guide business departments through the proper processes to ensure information security directives are met.

He/She will work with PFSUS and PFSC business units to assist with project tasks. He/She will be responsible for providing deliverables, performing tasks, and keeping project leaders abreast of project status while ensuring that all project timelines are met.

The Business Information Security Manager will need to work autonomously and provide direction and approval to business owners regarding data governance topics. He/She will need to present metrics and status upward and across the organization and liaise with North American sister companies. He/She will need to stay up to date with information security best practices and standard frameworks.

• Responsible for Day to day management of PFSNA information security strategy.
• Act as a cyber-security subject matter expert (SME) to PFSUS and PFSC business departments, coordinating and providing multi-disciplinary knowledge, skills and experience in security architecture and security management.
• Manage the PFSNA vendor information security risk assessment and review process in compliance with the Porsche Information Security directives and associated governance documentation.
• Perform onsite vendor audits identifying information security risks, exposures and safeguards. Document risks, create recommendations and develop counter measures.
• Ensure compliance with legal requirements and Porsche policies in regarding information security, and advises the Director, Compliance & Business Integrity on anomalies and create monthly management reports.
• Coordinate with PCNA IT to fulfill PFSUS and PFSC information security requirements.
• Conduct information security reviews of key vendors and all externally hosted and developed websites.
• Participate in PFS Cyber Crisis Committee and Business Continuity Committee and advise on cyber security topics as needed.
• Support formal investigations of and manage responses to information security and data protection incidents and their resolution in collaboration with the appropriate parties
• Coordinate with PCNA IT to develop and maintain a corporate information security awareness program for PFSUS and PFSC
• Review and red line vendor agreements for compliance with information security, data privacy, and records retention standards
• Oversee the review of vendor responses to vendor management related questionnaires and self-assessments (audits)
• Oversee annual Document Management Compliance activities
• Oversee the maintenance and enhancement of the Porsche Privacy Management System for PFSNA.
• Oversee the operation and utilization of the One Trust system for PFSNA, including ongoing management of Records of Processing Activities, Privacy Impact Assessments, and Data Inventories.
• Responsible for the development and maintenance of formal privacy request training for Customer Service and Remarketing representatives to support employee awareness and adherence with all applicable laws and regulations.
• Maintain subject matter expertise on applicable consumer privacy law, including, but not limited to the California Consumer Privacy Act (CCPA).
• Support internal audit activities and oversee audit measure resolution tasks relating to data privacy and information security related topics
• Manage and respond to data privacy and information security support requests from across the business.
• Act as the PFSNA Local Information Security Officer (LISO) as well…