Manager - Information Security & Compliance

Holman is a family-owned, global automotive services organization anchored by our deeply rooted core values and principles that have enabled us to continue Driving What’s Right throughout the last century. Our teams deliver the Holman Experience by treating our customers and each other as we would like to be treated, and creating positive, rewarding relationships all around.

The automotive markets Holman serves include fleet management and leasing; vehicle fabrication and upfitting; component manufacturing and productivity solutions; powertrain distribution and logistics services; commercial and personal insurance and risk management; and retail automotive sales as one of the largest privately owned dealership groups in the United States.

Holman is currently accepting applications for the position of Manager
- Information Security & Compliance Principal Purpose of Position:

Develops and maintains a security program and executes initiatives that address identified risks and security requirements.

Develops and maintains a security focused governance, risk and compliance program.

Maintains security organizational profiles, data inventories, threats and risks for Holman companies.

Advises management on best practices, current trends, and pertinent changes in internal/external threats and opportunities in a timely and anticipatory manner. Presents, influences and executives on action plans.

Develop new and proposes changes to policies and procedures to ensure operating efficiency and regulatory compliance.

Provides security communication, awareness and training for audiences, which may range from senior leaders to field staff.

Consults with Technology and the Business to ensure security is factored into the evaluation, selection, installation and configuration of hardware, purchased software, developed software and vendors.

Plans and conducts assessment including but not limited to organizational, compliance, risk, program, system, policy, incident response and general security.

Manages the organization’s response during Information Security Incidents Monitors compliance of information security policies. Communicates and reports infringements to Senior Management.

Manage a staff of information security professionals, hire and train new staff, and conduct performance reviews. Provide leadership and coaching which include technical and personal development programs.

Relevant

Work Experience:

5-7+ years of Information Security experience.
3+ years in a management leadership role.

Strong experience in developing and executing security architecture and strategies. This includes strategic, tactical and project level plans.

Strong experience with common information security frameworks. Examples include:
International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL), Control Objectives for Information and Related Technology (COBIT) frameworks, NIST 800-53 and Center of Information Security Critical Security Controls.

Familiarity with applicable legal and regulatory requirements, including, but not limited to, the U.S. Sarbanes-Oxley Act, FTC Data Safeguards, Payment Card Industry (PCI), EU General Data Protection Regulation (GDPR) and Personal Information Protection and Electronic Documents Act (PIPEDA).Working knowledge of various technology tools used to manage and perform security and compliance functions.

Education and/or Training:

Four year college degree or demonstrated equivalent experience as determined by department management.

Security certifications such as CISMP/GIAC/CISA/CISM or ISACA is a plus.#LI-BW1#LI-Remote At Holman, we exist to provide rewarding careers and better lives for employees and their families. We hire, train, empower, and reward exceptional people. Our journey is…