4,115 Cybersecurity Leadership jobs in the United States
Security Officer Leadership Academy
Posted 3 days ago
Job Viewed
Job Description
Allied Universal®, North America's leading security and facility services company, offers rewarding careers that provide you a sense of purpose. While working in a dynamic, welcoming, and collaborative workplace, you will be part of a team that contributes to a culture that positively impacts the communities and customers we serve. We offer a comprehensive benefits package that may include medical, dental, and vision coverage, life insurance, a retirement plan, employee assistance programs, company discounts, and other perks, depending on the position and eligibility.
**Job Description:**
As a Security Officer, you will serve and safeguard clients in a range of industries such as Commercial Real Estate, Healthcare, Education, Government and more.
**Responsibilities:**
+ Provide customer service to our clients by carrying out safety and security procedures, site-specific policies and when appropriate, emergency response activities
+ Respond to incidents and critical situations in a calm, problem solving manner
+ Conduct regular and random patrols around the business and perimeter. Working environments and conditions may vary by client site.
**Minimum Requirements:**
+ Be at least 18 years of age for unarmed roles; 21+ years of age for armed roles
+ Possess a high school diploma or equivalent, or 5 years of verifiable experience
+ As a condition of employment, applicants will be subject to a background investigation in accordance with all federal, state, and local laws. Allied Universal will consider qualified applications with criminal histories in a manner consistent with applicable laws.
+ As a condition of employment, applicants will be subject to a drug screen to the extent permitted by law.
+ Licensing requirements are subject to state and/or local laws and regulations and may be required prior to employment.*A valid driver's license will be required for driving positions only
**Perks and Benefits:**
+ Health insurance and 401k plans for full-time positions
+ Schedules that fit with your personal life goals
+ Ongoing paid training programs and career growth opportunities
+ Employee discounts through our perks program to your favorite restaurants, entertainment venues and much more.
Allied Universal® is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race/ethnicity, age, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, disability, protected veteran status or relationship/association with a protected veteran, or any other basis or characteristic protected by law. For more information: you have any questions regarding Equal Employment Opportunity, have difficulty using the online system and require an alternate method to apply, or require an accommodation at any time during the recruitment and/or employment process, please contact our local Human Resources department. To find an office near you, please visit: Universal® is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race/ethnicity, age, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, disability, protected veteran status or relationship/association with a protected veteran, or any other basis or characteristic protected by law. For more information: you have any questions regarding Equal Employment Opportunity, have difficulty using the online system and require an alternate method to apply, or require an accommodation at any time during the recruitment and/or employment process, please contact our local Human Resources department. To find an office near you, please visit: ID:**
**Location:** United States-Texas-Westlake
**Job Category:** Security Officer
Director of Cybersecurity Strategy
Posted 24 days ago
Job Viewed
Job Description
Key Responsibilities:
- Develop and execute the enterprise-wide cybersecurity strategy and roadmap.
- Define and oversee the implementation of cybersecurity policies, standards, and governance frameworks.
- Lead comprehensive risk assessment and management programs.
- Champion cybersecurity best practices and foster a security-aware culture across the organization.
- Collaborate with executive leadership and business units to align security initiatives with business objectives.
- Manage the cybersecurity budget and allocate resources effectively.
- Oversee incident response planning and ensure business continuity and disaster recovery capabilities.
- Stay current with global threat intelligence, regulatory requirements, and emerging cybersecurity technologies.
- Build and maintain strong relationships with internal stakeholders and external partners.
- Provide strategic guidance and thought leadership on cybersecurity matters.
- Master's degree in Cybersecurity, Computer Science, Business Administration, or a related field.
- 12+ years of progressive experience in cybersecurity leadership and strategy development.
- Proven experience in developing and implementing successful cybersecurity programs in large organizations.
- Deep understanding of various cybersecurity domains, including governance, risk, compliance (GRC), threat intelligence, incident response, and security operations.
- Exceptional strategic thinking, analytical, and problem-solving skills.
- Outstanding leadership, communication, and interpersonal skills, with the ability to influence at all levels.
- Experience managing budgets and leading cross-functional teams.
- Familiarity with relevant industry frameworks and regulations (e.g., NIST, ISO 27001, GDPR, CCPA).
- CISSP, CISM, or equivalent advanced certifications are highly preferred.
Cybersecurity Strategy, Operations and Board Engagement Director
Posted today
Job Viewed
Job Description
**The Role**
The Cyber Security Strategy Director is a strategic leadership role responsible for enabling the CISO and Cybersecurity Leadership Team to operate at peak efficiency. This role will act as a trusted advisor, program manager, and operational leader-ensuring the smooth execution of cybersecurity strategy, board engagement, regulatory and audit readiness, and enterprise-wide security initiatives. The position requires exceptional organizational acumen, deep understanding of cybersecurity principles, financial planning and forecasting, and strong stakeholder management skills across executive, technical, and operational audiences.
**The Responsibilities**
**Board & Executive Engagement**
+ Lead preparation of Board and Executive Committee materials, ensuring clear, concise, and actionable cybersecurity reporting.
+ Partner with the CISO to develop strategic narratives for board updates, including threat landscape insights, program performance, and risk posture.
+ Coordinate follow-up actions and communications stemming from Board and senior leadership meetings.
**Audit & Compliance Oversight**
+ Oversee internal and external cyber audit processes, ensuring timely responses, evidence collection, and remediation tracking.
+ Act as the primary liaison with internal audit, external auditors, and regulatory bodies for cybersecurity matters.
+ Maintain readiness for regulatory examinations and attestations (e.g., SOX, NYDFS, DORA, PCI DSS).
**Cybersecurity Strategy & Program Management**
+ Partner with the CISO to design, refine, and execute the organization's cybersecurity strategy, ensuring alignment with business priorities and risk tolerance.
+ Drive strategic initiatives, cross-functional projects, and security transformation programs to successful completion.
+ Monitor industry trends, threat intelligence, and regulatory changes to inform strategic decisions.
**Metrics, Reporting & Performance Management**
+ Develop, maintain, and communicate meaningful cybersecurity metrics and key performance indicators (KPIs) to measure program effectiveness.
+ Oversee creation of executive dashboards and data visualizations for senior leadership and Board reporting.
+ Ensure metrics drive informed decision-making and continuous improvement.
**Operational Leadership & Team Enablement**
+ Serve as the operational right-hand to the CISO, enabling prioritization, issue resolution, and decision support.
+ Lead cross-functional coordination between security domains, technology teams, and business units.
+ Support talent development initiatives, including succession planning and leadership team coaching.
**Qualifications**
**The Qualifications**
Required:
+ 10+ years in cybersecurity, information security, or related technology risk roles, with at least 3 years in a leadership or Strategy Director capacity.
+ Proven experience preparing Board-level content and communicating complex technical topics to non-technical audiences.
+ Strong background in audit management, regulatory compliance, and risk governance.
+ Demonstrated success in cybersecurity strategy development and execution.
+ Expertise in building and interpreting metrics, KPIs, and performance reports.
+ Exceptional organizational, communication, and interpersonal skills.
+ Ability to manage multiple priorities in a fast-paced, high-pressure environment.
Preferred:
+ Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or related field; Master's degree preferred.
+ Relevant certifications (e.g., CISSP, CISM, CRISC, CGEIT, PMP).
+ Experience in a global or highly regulated industry (e.g., financial services, healthcare, insurance).
**Key Competencies**
+ Strategic Thinking: Ability to translate vision into actionable plans.
+ Executive Communication: Skilled in delivering impactful narratives to senior stakeholders.
+ Program Management: Proven track record of leading complex, cross-functional initiatives.
+ Analytical Insight: Strong data-driven decision-making capability.
+ Adaptability: Comfort in dynamic, rapidly evolving environments.
+ Influence & Collaboration: Ability to build trust and drive consensus across diverse teams.
**Impact of the Role**
The Cyber Security Strategy Director will ensure the CISO organization operates with strategic clarity, operational discipline, and measurable impact. This role will directly influence the effectiveness of board communications, the success of strategic initiatives, and the organization's ability to navigate an increasingly complex cyber risk landscape.
This role can be based anywhere in the US, with a preference for Eastern Time-zone locations. This role can be fully remote or hybrid.
Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity.
**This position will remain posted for a minimum of three business days from the date posted or until a sufficient/appropriate candidate slate has been identified.**
**Compensation and Benefits**
Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only).
Compensation
The base salary compensation range being offered for this role is $130,000- $180,000 USD per year. This role is also eligible for an annual short-term incentive bonus.
**Company Benefits (US locations)**
WTW provides a competitive benefit package which includes the following (eligibility requirements apply):
+ **Health and Welfare Benefits:** Medical (including prescription coverage), Dental, Vision, Health Savings Account, Commuter Account, Health Care and Dependent Care Flexible Spending Accounts, Group Accident, Group Critical Illness, Life Insurance, AD&D, Group Legal, Identify Theft Protection, Wellbeing Program and Work/Life Resources (including Employee Assistance Program)
+ **Leave Benefits:** Paid Holidays, Annual Paid Time Off (includes paid state/local paid leave where required), Short-Term Disability, Long-Term Disability, Other Leaves (e.g., Bereavement, FMLA, ADA, Jury Duty, Military Leave, and Parental and Adoption Leave), Paid Time Off ( ( _Washington State only_ )
+ **Retirement Benefits:** Contributory Pension Plan and Savings Plan (401k).
This is a remote role, based anywhere in the US.
We understand flexibility is key to supporting an inclusive and diverse workforce and so we encourage requests for all types of flexible working as well as location-based arrangements. Please speak to your recruiter to discuss more.
Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records.
**EOE, including disability/vets**
Cybersecurity Strategy, Operations and Board Engagement Director
Posted 5 days ago
Job Viewed
Job Description
**The Role**
The Cyber Security Strategy Director is a strategic leadership role responsible for enabling the CISO and Cybersecurity Leadership Team to operate at peak efficiency. This role will act as a trusted advisor, program manager, and operational leader-ensuring the smooth execution of cybersecurity strategy, board engagement, regulatory and audit readiness, and enterprise-wide security initiatives. The position requires exceptional organizational acumen, deep understanding of cybersecurity principles, financial planning and forecasting, and strong stakeholder management skills across executive, technical, and operational audiences.
**The Responsibilities**
**Board & Executive Engagement**
+ Lead preparation of Board and Executive Committee materials, ensuring clear, concise, and actionable cybersecurity reporting.
+ Partner with the CISO to develop strategic narratives for board updates, including threat landscape insights, program performance, and risk posture.
+ Coordinate follow-up actions and communications stemming from Board and senior leadership meetings.
**Audit & Compliance Oversight**
+ Oversee internal and external cyber audit processes, ensuring timely responses, evidence collection, and remediation tracking.
+ Act as the primary liaison with internal audit, external auditors, and regulatory bodies for cybersecurity matters.
+ Maintain readiness for regulatory examinations and attestations (e.g., SOX, NYDFS, DORA, PCI DSS).
**Cybersecurity Strategy & Program Management**
+ Partner with the CISO to design, refine, and execute the organization's cybersecurity strategy, ensuring alignment with business priorities and risk tolerance.
+ Drive strategic initiatives, cross-functional projects, and security transformation programs to successful completion.
+ Monitor industry trends, threat intelligence, and regulatory changes to inform strategic decisions.
**Metrics, Reporting & Performance Management**
+ Develop, maintain, and communicate meaningful cybersecurity metrics and key performance indicators (KPIs) to measure program effectiveness.
+ Oversee creation of executive dashboards and data visualizations for senior leadership and Board reporting.
+ Ensure metrics drive informed decision-making and continuous improvement.
**Operational Leadership & Team Enablement**
+ Serve as the operational right-hand to the CISO, enabling prioritization, issue resolution, and decision support.
+ Lead cross-functional coordination between security domains, technology teams, and business units.
+ Support talent development initiatives, including succession planning and leadership team coaching.
**Qualifications**
**The Qualifications**
Required:
+ 10+ years in cybersecurity, information security, or related technology risk roles, with at least 3 years in a leadership or Strategy Director capacity.
+ Proven experience preparing Board-level content and communicating complex technical topics to non-technical audiences.
+ Strong background in audit management, regulatory compliance, and risk governance.
+ Demonstrated success in cybersecurity strategy development and execution.
+ Expertise in building and interpreting metrics, KPIs, and performance reports.
+ Exceptional organizational, communication, and interpersonal skills.
+ Ability to manage multiple priorities in a fast-paced, high-pressure environment.
Preferred:
+ Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or related field; Master's degree preferred.
+ Relevant certifications (e.g., CISSP, CISM, CRISC, CGEIT, PMP).
+ Experience in a global or highly regulated industry (e.g., financial services, healthcare, insurance).
**Key Competencies**
+ Strategic Thinking: Ability to translate vision into actionable plans.
+ Executive Communication: Skilled in delivering impactful narratives to senior stakeholders.
+ Program Management: Proven track record of leading complex, cross-functional initiatives.
+ Analytical Insight: Strong data-driven decision-making capability.
+ Adaptability: Comfort in dynamic, rapidly evolving environments.
+ Influence & Collaboration: Ability to build trust and drive consensus across diverse teams.
**Impact of the Role**
The Cyber Security Strategy Director will ensure the CISO organization operates with strategic clarity, operational discipline, and measurable impact. This role will directly influence the effectiveness of board communications, the success of strategic initiatives, and the organization's ability to navigate an increasingly complex cyber risk landscape.
This role can be based anywhere in the US, with a preference for Eastern Time-zone locations. This role can be fully remote or hybrid.
Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity.
**This position will remain posted for a minimum of three business days from the date posted or until a sufficient/appropriate candidate slate has been identified.**
**Compensation and Benefits**
Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only).
Compensation
The base salary compensation range being offered for this role is $130,000- $180,000 USD per year. This role is also eligible for an annual short-term incentive bonus.
**Company Benefits (US locations)**
WTW provides a competitive benefit package which includes the following (eligibility requirements apply):
+ **Health and Welfare Benefits:** Medical (including prescription coverage), Dental, Vision, Health Savings Account, Commuter Account, Health Care and Dependent Care Flexible Spending Accounts, Group Accident, Group Critical Illness, Life Insurance, AD&D, Group Legal, Identify Theft Protection, Wellbeing Program and Work/Life Resources (including Employee Assistance Program)
+ **Leave Benefits:** Paid Holidays, Annual Paid Time Off (includes paid state/local paid leave where required), Short-Term Disability, Long-Term Disability, Other Leaves (e.g., Bereavement, FMLA, ADA, Jury Duty, Military Leave, and Parental and Adoption Leave), Paid Time Off ( ( _Washington State only_ )
+ **Retirement Benefits:** Contributory Pension Plan and Savings Plan (401k).
This is a remote role, based anywhere in the US.
We understand flexibility is key to supporting an inclusive and diverse workforce and so we encourage requests for all types of flexible working as well as location-based arrangements. Please speak to your recruiter to discuss more.
Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records.
**EOE, including disability/vets**
Information Security Management System Lead
Posted today
Job Viewed
Job Description
Over the 60 plus years of Generac's history, we've been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
The ISMS Lead coordinates and maintains the daily operations of the Information Security Management System (ISMS) Program, ensuring compliance with ISO27001 and alignment with Generac's broader cybersecurity and compliance frameworks. The ISMS lead is the central point of contact for cross-functional control owners, capability teams, and audit stakeholders-supporting evidence collection, risk and control tracking, and the orchestration of ISMS-related deliverables across both internal ISMS assessments and external ISO27001 audits.
The ISMS Lead drives operational excellence through governance coordination, audit readiness, and performance monitoring. This includes facilitating working groups, tracking the Statement of Applicability (SoA), risk register updates, and corrective action plans. The role supports both corporate and subsidiary teams in implementing and sustaining ISMS requirements, helping to foster a culture of compliance and continuous improvement across the organization.
**Major Responsibilities**
+ Coordinates the day-to-day operations of the Information Security Management System (ISMS), ensuring alignment with ISO27001 and Generac's unified governance and compliance frameworks
+ Maintains the GRC platform, supporting timely delivery of compliance activities across policy owners, control implementers, and evidence contributors
+ Facilitates internal ISMS assessments, committee meetings, and working group sessions by preparing agendas, tracking action items, and reporting compliance progress
+ Supports capability teams, subsidiaries, and control owners by clarifying implementation expectations, audit documentation needs, and evidence quality standards
+ Tracks and manages the lifecycle of risks, controls, and corrective actions, including updates to the risk register and the Statement of Applicability (SoA)
+ Coordinate ISMS readiness efforts in preparation for external ISO27001 audits or other applicable certification assessments
+ Develops and refines ISMS-related documentation, including procedures, guidelines, control narratives, and support materials
+ Maintains dashboards and performance metrics related to audit readiness, non-conformity closure, and risk treatment activities
+ Identifies bottlenecks, overdue tasks, and control misalignments, escalating as needed to the IT GRC Capability Manager or Director of InfoSec
+ Ensures consistent version control, evidence traceability, and document quality across all submissions in support of audits or assessments
+ Collaborates with Capability Teams and subsidiaries to ensure control implementation aligns with policy and framework expectations
+ Monitors developments in ISO27001:2022, privacy regulations, and industry best practices to continuously improve the ISMS model and processes
+ Supports onboarding and enablement of new ISMS participants, including training on stakeholder roles, tool usage, and evidence responsibilities
+ Coordinates internal evidence gathering for ISMS assessments and external audits, including document requests, stakeholder interviews, and audit walkthrough preparation
**Minimum Job Requirements**
**Education**
+ Bachelor's Degree with Information Technology focus, or equivalent experience
**Work Experience**
+ 5 years experience in Information Security Management Systems or Cyber Security.
+ Proven experience supporting or coordinating ISO27001 compliance or certification efforts.
+ Experience working within a multi-framework compliance program (e.g., ISO27001, NIST, SOC 2, PCI, GDPR).
+ Understanding of risk assessment methodologies, control mapping, and evidence management practices.
+ Experience with GRC platforms, able to apply prior learnings to new GRC tools.
+ Experience with cross functional coordination, providing guidance to teams across IT and business functions
**Knowledge / Skills / Abilities**
+ Familiarity with cloud service models and control responsibilities in SaaS/PaaS/IaaS environments
+ Strong coordination, documentation, and communication skills for multi-stakeholder collaboration
+ Familiarity with unified control framework initiatives or crosswalks across security and privacy standards
+ Understanding of how compliance maps to internal business processes and capability team structures
+ Ability to coordinate evidence requests, policy updates, and SoA changes in a dynamic environment
+ Experience maintaining compliance metrics, dashboards, or remediation tracking reports
+ Knowledge of key control areas such as access control, data protection, vulnerability management, and incident response
**Preferred Job Requirements**
**Certification / License**
+ Certifications preferred: ISO27001 Lead Implementer or Auditor, CISA, CISSP, CISM, or SCF Certified Practitioner
**Great Reasons to work for Generac**
+ Competitive Benefits: Health, Dental, Vision, 401k and many more
+ Pride! When a storm strikes, Generac employees always rise to the occasion. Each time a storm hits, many employees volunteer their time with the customer support team or on the production line, while others go right into storm-affected areas to repair generators
+ Make a positive impact. Generac has always been community-minded and dedicated to giving back. The company proudly offers a Volunteer Time Off program, inviting team members to participate in charitable volunteer opportunities on company time.
+ We're an inclusive company that celebrates differences and keeps equity and respect at the forefront.
**Compensation:** Generac is committed to fair and equitable compensation practices. The salary range for this role when based in Colorado or California is $120,000 to $150,000. This compensation will ultimately be in line with the location in which the position is filled. Final compensation for this role will be determined by various factors such as a candidate's relevant work experience, skills, certifications, and geographic location.
**Physical Demands** : While performing the duties of this job, the employee is regularly required to talk and hear; and use hands to manipulate objects or controls. The employee is regularly required to stand and walk. On occasion the incumbent may be required to stoop, bend or reach above the shoulders. The employee must occasionally lift up to 25 - 50 pounds. Specific conditions of this job are typical of frequent and continuous computer-based work requiring periods of sitting, close vision and ability to adjust focus. Occasional travel.
_"We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability status, protected veteran status, or any other characteristic protected by law."_
Over the 60 plus years of Generac's history, we've been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
As one of the leaders and largest suppliers of power generation equipment and technology, the work we do touches millions of lives. Employees at Generac are encouraged to be innovative and are valued as an integral part of our global team. Our challenging goals develop knowledgeable employees dedicated to helping continue Generac's success. Generac provides individuals the opportunity to work in a fast-paced agile work environment where their work makes a difference in people's lives and their own.
Information Security Management System Lead
Posted 4 days ago
Job Viewed
Job Description
Over the 60 plus years of Generac's history, we've been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
The ISMS Lead coordinates and maintains the daily operations of the Information Security Management System (ISMS) Program, ensuring compliance with ISO27001 and alignment with Generac's broader cybersecurity and compliance frameworks. The ISMS lead is the central point of contact for cross-functional control owners, capability teams, and audit stakeholders-supporting evidence collection, risk and control tracking, and the orchestration of ISMS-related deliverables across both internal ISMS assessments and external ISO27001 audits.
The ISMS Lead drives operational excellence through governance coordination, audit readiness, and performance monitoring. This includes facilitating working groups, tracking the Statement of Applicability (SoA), risk register updates, and corrective action plans. The role supports both corporate and subsidiary teams in implementing and sustaining ISMS requirements, helping to foster a culture of compliance and continuous improvement across the organization.
**Major Responsibilities**
+ Coordinates the day-to-day operations of the Information Security Management System (ISMS), ensuring alignment with ISO27001 and Generac's unified governance and compliance frameworks
+ Maintains the GRC platform, supporting timely delivery of compliance activities across policy owners, control implementers, and evidence contributors
+ Facilitates internal ISMS assessments, committee meetings, and working group sessions by preparing agendas, tracking action items, and reporting compliance progress
+ Supports capability teams, subsidiaries, and control owners by clarifying implementation expectations, audit documentation needs, and evidence quality standards
+ Tracks and manages the lifecycle of risks, controls, and corrective actions, including updates to the risk register and the Statement of Applicability (SoA)
+ Coordinate ISMS readiness efforts in preparation for external ISO27001 audits or other applicable certification assessments
+ Develops and refines ISMS-related documentation, including procedures, guidelines, control narratives, and support materials
+ Maintains dashboards and performance metrics related to audit readiness, non-conformity closure, and risk treatment activities
+ Identifies bottlenecks, overdue tasks, and control misalignments, escalating as needed to the IT GRC Capability Manager or Director of InfoSec
+ Ensures consistent version control, evidence traceability, and document quality across all submissions in support of audits or assessments
+ Collaborates with Capability Teams and subsidiaries to ensure control implementation aligns with policy and framework expectations
+ Monitors developments in ISO27001:2022, privacy regulations, and industry best practices to continuously improve the ISMS model and processes
+ Supports onboarding and enablement of new ISMS participants, including training on stakeholder roles, tool usage, and evidence responsibilities
+ Coordinates internal evidence gathering for ISMS assessments and external audits, including document requests, stakeholder interviews, and audit walkthrough preparation
**Minimum Job Requirements**
**Education**
+ Bachelor's Degree with Information Technology focus, or equivalent experience
**Work Experience**
+ 5 years experience in Information Security Management Systems or Cyber Security.
+ Proven experience supporting or coordinating ISO27001 compliance or certification efforts.
+ Experience working within a multi-framework compliance program (e.g., ISO27001, NIST, SOC 2, PCI, GDPR).
+ Understanding of risk assessment methodologies, control mapping, and evidence management practices.
+ Experience with GRC platforms, able to apply prior learnings to new GRC tools.
+ Experience with cross functional coordination, providing guidance to teams across IT and business functions
**Knowledge / Skills / Abilities**
+ Familiarity with cloud service models and control responsibilities in SaaS/PaaS/IaaS environments
+ Strong coordination, documentation, and communication skills for multi-stakeholder collaboration
+ Familiarity with unified control framework initiatives or crosswalks across security and privacy standards
+ Understanding of how compliance maps to internal business processes and capability team structures
+ Ability to coordinate evidence requests, policy updates, and SoA changes in a dynamic environment
+ Experience maintaining compliance metrics, dashboards, or remediation tracking reports
+ Knowledge of key control areas such as access control, data protection, vulnerability management, and incident response
**Preferred Job Requirements**
**Certification / License**
+ Certifications preferred: ISO27001 Lead Implementer or Auditor, CISA, CISSP, CISM, or SCF Certified Practitioner
**Great Reasons to work for Generac**
+ Competitive Benefits: Health, Dental, Vision, 401k and many more
+ Pride! When a storm strikes, Generac employees always rise to the occasion. Each time a storm hits, many employees volunteer their time with the customer support team or on the production line, while others go right into storm-affected areas to repair generators
+ Make a positive impact. Generac has always been community-minded and dedicated to giving back. The company proudly offers a Volunteer Time Off program, inviting team members to participate in charitable volunteer opportunities on company time.
+ We're an inclusive company that celebrates differences and keeps equity and respect at the forefront.
**Compensation:** Generac is committed to fair and equitable compensation practices. The salary range for this role when based in Colorado or California is $120,000 to $150,000. This compensation will ultimately be in line with the location in which the position is filled. Final compensation for this role will be determined by various factors such as a candidate's relevant work experience, skills, certifications, and geographic location.
**Physical Demands** : While performing the duties of this job, the employee is regularly required to talk and hear; and use hands to manipulate objects or controls. The employee is regularly required to stand and walk. On occasion the incumbent may be required to stoop, bend or reach above the shoulders. The employee must occasionally lift up to 25 - 50 pounds. Specific conditions of this job are typical of frequent and continuous computer-based work requiring periods of sitting, close vision and ability to adjust focus. Occasional travel.
_"We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability status, protected veteran status, or any other characteristic protected by law."_
Over the 60 plus years of Generac's history, we've been dedicated to energy innovation. From creating the home standby generator market category, to our current evolution into an energy technology solutions company, we continue to push new boundaries.
As one of the leaders and largest suppliers of power generation equipment and technology, the work we do touches millions of lives. Employees at Generac are encouraged to be innovative and are valued as an integral part of our global team. Our challenging goals develop knowledgeable employees dedicated to helping continue Generac's success. Generac provides individuals the opportunity to work in a fast-paced agile work environment where their work makes a difference in people's lives and their own.
Director Information Security & Risk Management
Posted 4 days ago
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
***CANDIDATE MUST BE US Citizen (due to contractual/access requirements)***
This job directs and manages Identity and Access Management (IAM) services for the Enterprise. Provides leadership to the Organization's IAM program, including developing and managing the related policies, standards, architectures, and controls. Partners with Information Security, IT Infrastructure, Application Development, and business units to ensure secure and appropriate access to systems and data. Develops talent, addresses resource management, cultivates capabilities of staff, plans and coordinates work, and manages performance. Actively contributes to the IAM strategic planning process to develop and implement department strategic plans and action steps that support corporate strategic objectives. Defines service levels and monitors adherence. Sets budgets and controls expenses within the operating unit. Creates a team environment that promotes cooperation, empowerment, accountability, customer focus, and effective work relationships in order to realize business goals.
**ESSENTIAL RESPONSIBILITIES**
+ Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
+ Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
+ Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence.
+ Provide Leadership to the Department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security and risk management innovation; demonstrate and champion the following characteristics in fulfilling the responsibilities of the job - passion, empowerment, accountability, collaboration and ethics.
+ Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with senior executives and staff to develop solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management; provide oversight regarding metrics, funding, budgets and resources.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field, or relevant experience and/or education as determined by the company in lieu of bachelor's degree
**Preferred**
+ Master's Degree in Information Security, or a related field with a focus on Identity and Access Management.
**EXPERIENCE**
**Required**
+ 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
+ 10 - 15 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
+ 7 - 10 years in mentoring others in a leadership role
+ 5 - 7 years in Staff Management
+ 5 - 7 years in developing and executing strategic plans to realize business objectives
+ 5 - 7 years establishing budgets and meeting fiduciary goals
**Preferred**
+ Experience managing an Identity and Access Management program using industry-standard frameworks.
+ Experience with cloud-based IAM solutions.
+ Experience with implementing and managing role-based access control (RBAC), attribute-based access control (ABAC), and policy-based access control (PBAC).
+ Experience with Zero Trust security models and their application to Identity and Access Management.
+ Experience with the application of Artificial Intelligence (AI) and Machine Learning (ML) to Identity and Access Management.
+ Experience with Identity Governance technologies (e.g., SailPoint).
+ Experience with Public Key Infrastructure (PKI).
+ Experience with Federated Identity Management (SAML, OAuth, OpenID Connect).
+ Experience with enterprise directory services such as Active Directory and LDAP.
+ Experience with securing APIs using IAM principles and technologies.
+ Experience with cloud-based identity providers like Azure AD, AWS IAM, and Google Cloud Identity.
**LICENSES AND CERTIFICATIONS**
**Required**
+ None
**Preferred** (any of the following)
+ Certified Information Systems Security Professional (CISSP)
+ Certified Information Security Manager (CISM)
+ Certified in Risk and Information Systems Controls (CRISC)
+ Information Technology Infrastructure Library (ITIL)
**SKILLS**
+ Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), HITECH, Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
+ Strong executive communication and presenting skills
+ Strong teamwork and interpersonal skills
+ Experience in leading process improvement initiatives
+ Ability to motivate high performance, multi-discipline teams
+ Demonstrated competency in project execution
+ Demonstrated abilities in relationship management
**Language (Other than English):**
None
**Travel Requirement:**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-based
Teaches / trains others regularly
Occasionally
Travel regularly from the office to various work sites or from site-to-site
Rarely
Works primarily out-of-the office selling products/services (sales employees)
Never
Physical work site required
Yes
Lifting: up to 10 pounds
Constantly
Lifting: 10 to 25 pounds
Occasionally
Lifting: 25 to 50 pounds
Rarely
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
**Pay Range Minimum:**
$126,400.00
**Pay Range Maximum:**
$236,000.00
_Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J
Be The First To Know
About the latest Cybersecurity leadership Jobs in United States !
Manager Information Security & Risk Management
Posted 4 days ago
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
**ESSENTIAL RESPONSIBILITIES**
+ Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
+ Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
+ Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
+ Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
+ Ensure compliance to Corporate and Information Security policies, standards and procedures.
+ Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
**Substitutions**
+ 6 years of relevant experience substitution for a Bachelor's Degree
**Preferred**
+ Master's Degree in Computer Science, Information Security or related field
**EXPERIENCE**
**Required**
+ 7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
+ 7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
+ 1 - 3 years in mentoring others in a leadership role
+ 1 - 3 years in Staff Management
+ 1 - 3 years in developing and executing strategic plans to realize business objectives
**Preferred**
+ 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
+ Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
+ Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
+ Experience establishing budgets and meeting fiduciary goals
+ Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)
**LICENSES AND CERTIFICATIONS**
**Required**
+ None
**Preferred**
+ Certified Information Systems Security Professional (CISSP) **OR**
+ Certified Information Security Manager (CISM) **OR**
+ Certified in Risk and Information Systems Controls (CRISC) **OR**
+ Information Technology Infrastructure Library (ITIL)
**SKILLS**
+ Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
+ Strong teamwork and interpersonal skills
+ Experience in leading process improvement initiatives
+ Ability to motivate high performance, multi-discipline teams
+ Demonstrated competency in project execution
+ Demonstrated abilities in relationship management
**Languages (Other than English)**
None
**Travel Requirement**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-Based
Teaches/Trains others regularly
Frequently
Travels regularly from the office to various work sites or from site-to-site
Occasionally
Works primarily out-of-the office selling products/services (Sales employees)
Does Not Apply
Physical Work Site Required
Yes
Lifting: up to 10 pounds
Does Not Apply
Lifting: 10 to 25 pounds
Does Not Apply
Lifting: 25 to 50 pounds
Does Not Apply
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
**Pay Range Minimum:**
$108,000.00
**Pay Range Maximum:**
$201,800.00
_Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J
Director Information Security & Risk Management
Posted today
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
***CANDIDATE MUST BE US Citizen (due to contractual/access requirements)***
This job directs and manages Identity and Access Management (IAM) services for the Enterprise. Provides leadership to the Organization's IAM program, including developing and managing the related policies, standards, architectures, and controls. Partners with Information Security, IT Infrastructure, Application Development, and business units to ensure secure and appropriate access to systems and data. Develops talent, addresses resource management, cultivates capabilities of staff, plans and coordinates work, and manages performance. Actively contributes to the IAM strategic planning process to develop and implement department strategic plans and action steps that support corporate strategic objectives. Defines service levels and monitors adherence. Sets budgets and controls expenses within the operating unit. Creates a team environment that promotes cooperation, empowerment, accountability, customer focus, and effective work relationships in order to realize business goals.
**ESSENTIAL RESPONSIBILITIES**
+ Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
+ Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
+ Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence.
+ Provide Leadership to the Department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security and risk management innovation; demonstrate and champion the following characteristics in fulfilling the responsibilities of the job - passion, empowerment, accountability, collaboration and ethics.
+ Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with senior executives and staff to develop solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management; provide oversight regarding metrics, funding, budgets and resources.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field, or relevant experience and/or education as determined by the company in lieu of bachelor's degree
**Preferred**
+ Master's Degree in Information Security, or a related field with a focus on Identity and Access Management.
**EXPERIENCE**
**Required**
+ 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
+ 10 - 15 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
+ 7 - 10 years in mentoring others in a leadership role
+ 5 - 7 years in Staff Management
+ 5 - 7 years in developing and executing strategic plans to realize business objectives
+ 5 - 7 years establishing budgets and meeting fiduciary goals
**Preferred**
+ Experience managing an Identity and Access Management program using industry-standard frameworks.
+ Experience with cloud-based IAM solutions.
+ Experience with implementing and managing role-based access control (RBAC), attribute-based access control (ABAC), and policy-based access control (PBAC).
+ Experience with Zero Trust security models and their application to Identity and Access Management.
+ Experience with the application of Artificial Intelligence (AI) and Machine Learning (ML) to Identity and Access Management.
+ Experience with Identity Governance technologies (e.g., SailPoint).
+ Experience with Public Key Infrastructure (PKI).
+ Experience with Federated Identity Management (SAML, OAuth, OpenID Connect).
+ Experience with enterprise directory services such as Active Directory and LDAP.
+ Experience with securing APIs using IAM principles and technologies.
+ Experience with cloud-based identity providers like Azure AD, AWS IAM, and Google Cloud Identity.
**LICENSES AND CERTIFICATIONS**
**Required**
+ None
**Preferred** (any of the following)
+ Certified Information Systems Security Professional (CISSP)
+ Certified Information Security Manager (CISM)
+ Certified in Risk and Information Systems Controls (CRISC)
+ Information Technology Infrastructure Library (ITIL)
**SKILLS**
+ Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), HITECH, Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
+ Strong executive communication and presenting skills
+ Strong teamwork and interpersonal skills
+ Experience in leading process improvement initiatives
+ Ability to motivate high performance, multi-discipline teams
+ Demonstrated competency in project execution
+ Demonstrated abilities in relationship management
**Language (Other than English):**
None
**Travel Requirement:**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-based
Teaches / trains others regularly
Occasionally
Travel regularly from the office to various work sites or from site-to-site
Rarely
Works primarily out-of-the office selling products/services (sales employees)
Never
Physical work site required
Yes
Lifting: up to 10 pounds
Constantly
Lifting: 10 to 25 pounds
Occasionally
Lifting: 25 to 50 pounds
Rarely
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
**Pay Range Minimum:**
$126,400.00
**Pay Range Maximum:**
$236,000.00
_Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J
Manager Information Security & Risk Management
Posted today
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.
**ESSENTIAL RESPONSIBILITIES**
+ Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
+ Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
+ Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
+ Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
+ Ensure compliance to Corporate and Information Security policies, standards and procedures.
+ Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence; spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
**Substitutions**
+ 6 years of relevant experience substitution for a Bachelor's Degree
**Preferred**
+ Master's Degree in Computer Science, Information Security or related field
**EXPERIENCE**
**Required**
+ 7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
+ 7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
+ 1 - 3 years in mentoring others in a leadership role
+ 1 - 3 years in Staff Management
+ 1 - 3 years in developing and executing strategic plans to realize business objectives
**Preferred**
+ 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
+ Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
+ Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
+ Experience establishing budgets and meeting fiduciary goals
+ Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)
**LICENSES AND CERTIFICATIONS**
**Required**
+ None
**Preferred**
+ Certified Information Systems Security Professional (CISSP) **OR**
+ Certified Information Security Manager (CISM) **OR**
+ Certified in Risk and Information Systems Controls (CRISC) **OR**
+ Information Technology Infrastructure Library (ITIL)
**SKILLS**
+ Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
+ Strong teamwork and interpersonal skills
+ Experience in leading process improvement initiatives
+ Ability to motivate high performance, multi-discipline teams
+ Demonstrated competency in project execution
+ Demonstrated abilities in relationship management
**Languages (Other than English)**
None
**Travel Requirement**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-Based
Teaches/Trains others regularly
Frequently
Travels regularly from the office to various work sites or from site-to-site
Occasionally
Works primarily out-of-the office selling products/services (Sales employees)
Does Not Apply
Physical Work Site Required
Yes
Lifting: up to 10 pounds
Does Not Apply
Lifting: 10 to 25 pounds
Does Not Apply
Lifting: 25 to 50 pounds
Does Not Apply
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
**Pay Range Minimum:**
$108,000.00
**Pay Range Maximum:**
$201,800.00
_Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J