Assoc Director Security Risk Management

Verizon Communications - Miami, FL

Full-time - Senior

Remote - Miami, FL

Telecommunications

About the position

The Compliance Associate Director at Verizon CyberSecurity (VCS) will lead the Governance, Risk, and Compliance team in developing, implementing, and maintaining a comprehensive cybersecurity compliance program. This role focuses on ensuring compliance with customer and federally regulated standards, requiring strategic decision-making and strong interpersonal skills to collaborate with various stakeholders across the organization.

Responsibilities

• Develop, implement and maintain a comprehensive cybersecurity compliance program aligned to industry standards and regulations such as ISO 27001, NIST 800-171, NIST 800-53, PCI DSS.
• Oversee and manage the audit process associated with customer and federally regulated compliance programs, coordinating with third-party assessors and internal stakeholders.
• Report on the status of the compliance programs to senior management.
• Conduct regular risk assessments and gap analysis to proactively identify and mitigate potential non-compliance matters and vulnerabilities.
• Partner with various stakeholders across the organization, including IT, Legal, Compliance, and business units.
• Participate in audits and assessments.
• Stay abreast of emerging security threats, vulnerabilities, and industry best practices to proactively address potential risks.
• Act as a subject matter expert and provide guidance on compliance-related matters.
• Lead, develop, and manage employees to achieve organizational goals, including recruiting, training, and performance management.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or four or more years of work experience.
• Eight or more years of relevant work experience, demonstrated through a combination of work and/or military experience, or specialized training.
• Four or more years of experience in a compliance and/or audit role, preferably in a leadership capacity.
• Two or more years of program management experience.

Nice-to-haves

• Strong understanding of information security frameworks and standards such as ISO 27001, NIST CSF, NIST 800-53, NIST 800-171, and PCI DSS.
• Experience managing large scale projects, audits, and/or compliance efforts.
• Proven ability to track observations/gaps/vulnerabilities in support of compliance/audit efforts.
• Familiarity with security technologies such as firewalls, intrusion detection/prevention systems, and vulnerability scanners.
• Excellent written and verbal communication skills, with the ability to translate complex technical concepts into clear and concise language for various audiences.
• Strong analytical, problem-solving, and decision-making skills.
• Experience with ServiceNow functionality.
• Relevant industry certifications such as CISSP, CISM, CRISC, PCI QSA, PCI ISA.

Benefits

• Hybrid work environment with defined work location including work from home and office days.
• Equal Employment Opportunity policies promoting diversity and inclusion.