Director of Information Security

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

IT Full Time Senior Management Fort Worth, TX, US

Founded in 2010, Fun Town RV (FTRV) has grown into Texas’s largest RV chain, operating 36 locations and planning to expand. We provide excellent customer service and offer top RV brands for less, backed by a rigorous 100+ point inspection process on every RV we sell. At Fun Town RV, we prioritize hiring candidates who are honest, accountable, positive, and passionate about exceeding expectations.

If you're seeking a dynamic career with growth potential and competitive earning opportunities,

Overview: The Director of Information Security leads Fun Town RV’s information security program. This role sets security strategy, policies and standards, manages risk and compliance, and leads the response to security incidents. The Director partners with the Information Systems team, which implements and maintains the company’s technology.

Essential Duties and Responsibilities

• Build, maintain and continuously improve the company’s information security program, and report on its status to executive leadership at least annually.
• Develop, maintain and enforce information security policies, standards and procedures, including acceptable use, access control, data protection, logging and monitoring, and vendor risk management.
• Conduct periodic risk assessments and oversee the remediation of identified risks.
• Manage the vulnerability management program, including regular vulnerability assessments, annual penetration testing and remediation tracking.
• Maintain the incident response plan, lead the response to security incidents, and coordinate required notifications to regulators, customers and partners.
• Work with legal and compliance to identify applicable regulatory and industry requirements, and implement the IT and information security programs, policies, procedures and controls needed to meet them.
• Support legal, compliance and other departments on related programs, such as customer privacy and identity theft prevention.
• Work with the payment processor and Accounting to confirm that card payment processing meets payment card security requirements (PCI DSS), and maintain any requirements that apply to the company.
• Assess and monitor the security of third-party vendors that handle company or customer data.
• Set access management standards, including least-privilege access, multi-factor authentication and periodic access reviews.
• Define data protection standards, including encryption, data classification, data loss prevention (DLP), retention and secure disposal.
• Define security requirements and configuration standards for the Microsoft cloud environment, and verify they are met.
• Lead business continuity and disaster recovery planning and testing.
• Develop and deliver security awareness training for all employees, including internal phishing simulation testing.
• Manage cyber insurance requirements and prepare the company for audits and assessments.
• Partner with IT leadership to design and improve IT service management processes, and review changes for security impact.
• Define logging and monitoring requirements, monitor security alerts and metrics, and provide regular status reports to the CIO.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Systems or a related field, or equivalent work experience.
• 8+ years of experience in information technology or information security, including at least 5 years in an infrastructure + security role combination.
• Experience building or managing an information security program, including policies,…