Director Of Information Security
CurrentDirect management and oversight of the Information Security team and all Information Security related projects including Incident Management, Change Management, and Risk Management. Collaboration on strategies with Security Officer and other stakeholders associated with projects and initiatives. Charged with taking Quadax Information Security to the next level using industry standards to measure current state Information Security level and at annual intervals. Management of the portfolio of Information Security and associated projects providing strategic direction on each and tactical implementation of these initiatives. ResponsibilitiesInformation Security · Information Security strategy and implementation· Strengthen the IT Cyber Security and Risk Management program· On Prem and Cloud· Management of Information Security staff· Develop and implement a Vulnerability Management Program · Fortify our technical security capabilities such as:· Strengthen our SOC, Security Operations Center · Develop Security Analyst for improved forensics and remediation of deficiencies · Work with Application Development teams to ensure secure applications with appropriate SOC controls for ease of support and compliance Incident Management· Incident Management strategy and implementation · Refine current incident management process and procedures to align further with ITIL standards · Create a reporting dashboard for the business showing pertinent information and metrics about availability outages and downtime · Spearhead any taskforce needed to resolve major repeating issues/outages · Incident response testing and procedures · Flesh out a complete Security Incident Response plan and ensure approval by Cyber Insurance Provider, Attorney, and company leadership Risk Management· Risk Management strategy and implementation · Update Risk Assessment report annually · Ensure identified risks are managed and resolved · Track Risk Assessment accomplishments