Information Security Director

Description

Hybrid (2-4 days/week in office):
Boston, MA Headquarters

Step into a pivotal Security Leadership role at a fast-growing grid intelligence company. Line Vision’s customers include eight of the ten largest US utilities, which demand the highest levels of security in order to protect sensitive data and the electric grid from attack. You will lead Line Vision to achieve a security posture that exceeds industry standards and gives customers the confidence they need to rely on Line Vision.

Reporting to the VP of Security, IT, and Quality, you will have broad autonomy over security engineering, security operations, controls execution, governance, and compliance. You and a Security Analyst will own our SOC 2 Type II and ISO 27001 programs, risk management, incident response, penetration testing program, and customer security engagements. Partnering with IT, Platform, Hardware, and Customer Success, you will make security a strategic business advantage at Line Vision.

If you want to build a security program that is seen as a strategic differentiator and wins customer trust, join us at Line Vision
, Built In Boston Best Places to Work!

Please note:

Applicants must be currently authorized to work in the United States on a full-time basis. This position is not eligible for employment visa sponsorship.

• Compliance Program Ownership: Own the annual audit cycle for SOC 2 Type II and ISO 27001 using the Vanta compliance platform, including all controls, internal audits, external audits, and nonconformity tracking to closure.
• Risk Management & Governance: Lead the annual NIST CSF risk assessment, monthly Platform and Hardware risk reviews, and quarterly Governance, Risk & Compliance reviews. Maintain policies and report ISMS efficacy metrics to leadership.
• Security Engineering: Conduct AWS cloud and Sensor penetration tests, ISA/IEC 62443 product security assessments, vendor and product risk assessments.
• Security Operations: Oversee vulnerability management, Crowd Strike Falcon Complete detection rules, Next Gen SIEM data feeds, and the MSSP relationship. Monitor open-source license compliance with FOSSA.
• Incident Response & Resilience: Own the incident response program and plan, including the annual 3rd part tabletop, business continuity and disaster recovery exercises, and implementation of lessons learned.
• Confidential Data Protection: Define and guide data management controls, ensuring rigorous application of policies and customer contractual obligations regarding confidential data. Partner with Platform, Hardware and IT to apply controls across all company systems and applications.
• Customer & Sales Support: Lead responses to customer security questionnaires, contract security reviews, and customer-facing security presentations and material.
• AI Security: Identify risks and define security standards for enterprise and product AI. Inform the AI governance program with risk assessments and recommendations.
• Team Leadership: Coach and develop the security team.
• This role requires participation in a compensated rotational on-call schedule. On-call responsibilities are a condition of employment for this position.
• Please note:
  
  This role requires participation in a compensated, rotational on-call schedule. On-call responsibilities are a condition of employment for this position.

• Establish operational rhythm with the security team, including 1-1s, goal-setting, and sprint planning.
• Take ownership of the audit calendar, risk register, and security project portfolio.
• Implement an intake and prioritization process for security work that surfaces trade-offs and schedule risk early.
• Take over customer security questionnaires…