Director Information Security

The Sagility Team is currently hiring a talented Director of Information Security to lead all ongoing activities that serve to provide appropriate access to and protect the confidentiality and integrity of customer, employee, and business information in compliance with organization policies and standards.

Key areas of responsibility:

• Serve as an internal information security consultant to the organization, including design and controls for new projects and existing systems

• Incident Management as related to Security Incidences throughout the organization; including internal employee, data network and systems investigations

• Coordinate with legal as necessary for final policy approval, security infractions, and contract security requirements

• Manage, support and monitor access control and surveillance systems for corporate locations

• Manage SEIM logging (i.e. LogRhythm), vulnerability scanning (i.e. Nessus and NAVIS) environments

• Research, evaluate, test and recommend new or updated information security technologies

• Review and approve application, data network and server environments for security hardening standards

• Review all system-related security plans throughout the organization's network

• Implement information security policies and procedures for the organization

• Provide the organization with current information about information security technologies and related regulatory issues

• Collaborate with training departments for Security and Compliance curriculum to ensure all employees participate in Security Awareness training

• Monitor compliance with information security policies and procedures, referring problems to the appropriate department manager

• Perform information security risk assessments and serves as an internal auditor for security issues

• Coordinate activities related to audits and collaborate with third party auditors for annual compliance as listed below or may be included in the future:

• FISMA-NIST

• GLBA

• HIPAA

• ISAE 3402/3412

• ISO 2001

• ISO 9001

• PCI DSS 2.0/3.0

• SSAE16

• SOX

• SISR – AT&T Security Audit

Skills/experience required:

• Prefer bachelor Degree in Information Security or comparable experience.

• 10 plus years of previous Information Security experience.

• Proficiency with office automation tools, especially Windows and MS Office.

• Advanced knowledge of data logging from PC, Server, Network and Telecom

• Strong written and verbal communication skills, with the ability to communicate at any level of the organization

• Self-starter with a willingness to ask questions and actively seek out answers

• Ability to work closely with others as a solid team player

• A positive attitude and ability to handle stress in a fast-paced environment

• CISSP or SSCP

Salary: Starting at $125K plus dependent on experience

Sagility offers competitive benefits including:

• Medical

• Dental

• Vision

• Life Insurance

• Short-Term and Long-Term Disability

• Flexible Spending Account

• Life Assistance Program

• 401K with employer contribution

• PTO and Sick Time

• Tuition Reimbursement

Join our team; we look forward to talking with you.

An Equal Opportunity Employer/Vet/Disability