Chief Information Security Officer

Company Overview

When it comes to IT solution providers, there are many choices. But when it comes to providers with innovative and differentiating end‑to‑end service offerings, there’s really only one:
Zones – First Choice for IT.TM. Zones is a global solution provider of end‑to‑end IT solutions with an unmatched supply chain. Operating in more than 120 countries, Zones specializes in digital workplace, cloud & data center, networking, security, and managed/professional/staffing services. Zones is a minority business enterprise (MBE) with over 35 years of experience.

Reporting to the Vice President of IT Infrastructure and Security, the Chief Information Security Officer (CISO) provides vision and leadership for developing and supporting security initiatives. The CISO directs the planning and implementation of enterprise IT systems, business operations, and facility defenses against security breaches and vulnerability issues. The role includes auditing existing systems and administering security policies, activities, and standards.

• Participate as a member of the senior management team in governance processes of the organization’s security strategies.
• Lead strategic security planning to achieve business goals by prioritizing defense initiatives and coordinating the evaluation, deployment, and management of current and future security technologies using a risk‑based assessment methodology.
• Develop and communicate security strategies and plans to executive teams, staff, partners, customers, and stakeholders.
• Assist with the design and implementation of disaster recovery and business continuity plans, procedures, audits, and enhancements.
• Develop, implement, maintain, and enforce policies, procedures, and associated plans for system security administration and user access based on industry‑standard best practices.

• Define and communicate corporate plans, procedures, policies, and standards for acquiring, implementing, and operating new security systems, equipment, software, and other technologies.

• Act as advocate and primary liaison for the company’s security vision via regular written and in‑person communications with executives, department heads, and end users.
• Work closely with the IT department on corporate technology development to fully secure information, computer, network, and processing systems.
• Manage the administration of all computer security systems and corresponding software, including firewalls, intrusion detection systems, cryptography systems, and anti‑virus software.
• Ensure the administration of facility security systems and equipment, including fire alarms, locks, intruder detection systems, sprinkler systems, and anti‑theft measures.
• Develop, track, and control the security services annual operating and capital budgets for purchasing, staffing, and operations.
• Ensure that facilities, premises, and equipment comply with applicable laws and regulations.
• Recommend and implement changes in security policies and practices in accordance with changes in local or federal law.
• Provide cost‑effective resolution to security problems.
• Assess and communicate all security risks associated with purchases or practices performed by the company.
• Collaborate with the IT leader, privacy officer, and HR to establish and maintain a system that ensures security and privacy policies are met.
• Supervise recruitment, development, retention, and organization of security staff as needed.
• Promote and oversee strategic security relationships with internal resources and external entities, including government, vendors, and partner organizations.
• Stay informed on trends and issues in the security industry, advise, counsel, and educate executive and management teams on importance and financial impact.

• University degree in Computer Science or Business Administration required.
• Master’s or PhD in one of these fields or in Information Security preferred.
• Certifications:
  
  CISSP, CCSP, or equivalent preferred.

• 10+ years of experience managing and/or directing an IT and/or security operation.
• 15+ years of…