Manager Information Security and Risk Management - Enterprise Data Security

** Company :*
* enGen

** Job Description :*
* ** JOB SUMMARY*
* ***** CANDIDATE MUST BE US Citizen (due to contractual/access requirements)****
* This position serves as the  
** technical and strategic leader for the organization's Enterprise Data Protection program** , providing direction across data security,  
** data loss prevention (DLP)** , data classification,  
** Data (File and Database) Activity Monitoring** , encryption, key management, digital rights management, and emerging data security capabilities. The role  
** leads a multidisciplinary team
** consisting of analysts, product owners, architects, and engineering resources while establishing the  
** vision, roadmap, architecture, and execution strategy
** for enterprise data protection services. The successful candidate will possess deep technical expertise in data security architecture, engineering, and operations, with the ability to  
** translate complex technical concepts into business risk** , strategic priorities, and executive-level decisions. This individual will partner closely with security, cloud, infrastructure, application, privacy, legal, and business teams to protect sensitive information while enabling organizational objectives. The manager is  
** accountable for overall program maturity, technology strategy, operational execution, and continuous improvement
** across the enterprise data protection portfolio.

** ESSENTIAL RESPONSIBILITIES*
* + Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.

+ Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.

+ Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.

+ Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.

+ Ensure compliance to Corporate and Information Security policies, standards and  procedures.

+ Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence;  spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.

+ Other duties as assigned or requested.

** EDUCATION*
* ** Required*
* + Bachelor's Degree in Information Security, Information Systems,  Information Assurance, Computer Science or related field

** Substitutions*
* + 6 years of relevant experience substitution for a Bachelor's Degree

** Preferred*
* + Master's Degree in Computer Science, Information Security or related field

** EXPERIENCE*
* ** Required*
* + 7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology

+ 7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences

+ 1 - 3 years in mentoring others in a leadership role

+ 1 - 3 years in Staff Management

+ 1 - 3 years in developing and executing strategic plans to realize business objectives

** Preferred*
* + 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology

+ Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework

+ Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits

+ Experience establishing budgets and meeting fiduciary goals

+ Security industry organization participation/leadership (HITRUST, ISACA, Infra Gard, ISC2, ISSA, etc.)

+ Experience developing and executing enterprise data protection strategies, roadmaps, and operating models.

+ Experience implementing and managing data security technologies including Data Loss Prevention (DLP), Data Security Posture…