Chief Information Security Officer

Attractivate - Katy, TX

Full-time - Senior

Katy, TX

About the position

The Chief Information Security Officer (CISO) at Attractivate Consulting Solutions is responsible for developing and implementing a comprehensive information security strategy to safeguard the organization's assets and data. This role involves overseeing the Governance, Risk, and Compliance (GRC) program, managing Security Information and Event Management (SIEM) systems, and leading security awareness training initiatives. The CISO will ensure compliance with relevant security standards and regulations while collaborating with cross-functional teams to integrate security measures throughout the organization.

Responsibilities

• Develop and implement a comprehensive information security strategy to protect the organization's assets and data.
• Oversee the Governance, Risk, and Compliance (GRC) program using tools such as RSA Archer, MetricStream, and ServiceNow GRC.
• Manage the Security Information and Event Management (SIEM) systems, including Splunk, IBM QRadar, and ArcSight, to monitor and respond to security incidents.
• Utilize Threat Intelligence Platforms like ThreatConnect, Recorded Future, and Anomali to stay ahead of emerging threats and vulnerabilities.
• Lead the security awareness training program using platforms such as KnowBe4 and SANS Security Awareness to educate employees on security best practices.
• Ensure compliance with relevant security standards and regulations, such as ISO 27001, NIST, and GDPR.
• Conduct regular security assessments and audits to identify vulnerabilities and implement corrective actions.
• Collaborate with cross-functional teams to integrate security measures into all aspects of the organization's operations.
• Provide regular updates to senior management and the board of directors on the status of the organization's security posture.
• Stay up-to-date with the latest cybersecurity trends, threats, and technologies to continuously improve the organization's security posture.

Requirements

• Proven experience as a Chief Information Security Officer (CISO) or similar role.
• Strong knowledge of Governance, Risk, and Compliance (GRC) tools: RSA Archer, MetricStream, ServiceNow GRC.
• Proficiency with Security Information and Event Management (SIEM) systems: Splunk, IBM QRadar, ArcSight.
• Experience with Threat Intelligence Platforms: ThreatConnect, Recorded Future, Anomali.
• Familiarity with security awareness training platforms: KnowBe4, SANS Security Awareness.
• Excellent problem-solving skills and attention to detail.
• Strong communication and leadership abilities.
• Ability to work independently and manage time effectively.

Nice-to-haves

• Certifications such as CISSP, CISM, CISA, or equivalent.
• Experience in Agile/Scrum development methodologies.
• Knowledge of cloud security best practices and tools.

Benefits

• Opportunity to work on exciting and diverse projects.
• Collaborative and supportive work environment.
• Competitive compensation.
• Flexible working arrangements.