Deputy Information Security Officer

$210,000 - $210,000/Yr

Sorenson - Salt Lake City, UT

Full-time - Senior

Remote - Salt Lake City, UT

Professional, Scientific, and Technical Services

About the position

The Deputy Information Security Officer at Sorenson Communications will assist the Chief Information Security Officer (CISO) in developing and implementing the overall information security strategy. This role involves providing leadership to the information security team, ensuring alignment with organizational goals, and collaborating with various departments to integrate security measures into business processes. The position also includes overseeing security operations, managing risk and compliance, and developing security policies and procedures.

Responsibilities

• Assist the CISO in developing and implementing the overall information security strategy.
• Provide leadership and direction to the information security team.
• Collaborate with other departments to integrate security measures into business processes.
• Provide regular reporting on the status of the information security program to enterprise risk teams and senior business leaders.
• Develop, socialize, and coordinate approval and implementation of security policies.
• Liaise with the enterprise architecture team to ensure security requirements are built in by design.
• Direct the creation of a targeted information security awareness training program for all employees.
• Oversee security operations functions such as threat monitoring and incident response.
• Ensure effective management of security technologies, including firewalls and intrusion detection systems.
• Lead efforts to detect, respond to, and recover from security incidents and breaches.
• Assist in the development and maintenance of the organization's information security risk management framework.
• Ensure compliance with relevant regulatory requirements and industry standards.
• Conduct regular security assessments and audits to identify and mitigate risks.
• Develop, implement, and maintain information security policies, standards, and procedures.
• Mentor and develop a high-performing information security team.
• Engage with senior leadership to communicate security risks and strategies.
• Coordinate the development of cyber/physical incident response plans.

Requirements

• Certified Information Systems Auditor (CISA) certification.
• Minimum of 7 years of management experience in information security.
• Experience with COBIT, PCI, CISSP, SOX, CISM, and NIST standards.
• Strong skills in risk management, incident response, and vulnerability management.
• Bachelor's degree in a related field or equivalent experience.
• Proven experience in project management and cloud security.

Nice-to-haves

• Experience with contract and vendor negotiations.
• Strong technical background across a broad base of information security tools.
• Experience executing programs that meet objectives in a dynamic business environment.

Benefits

• Health savings account
• Paid holidays
• Health insurance
• Dental insurance
• 401(k) with 6% match
• Employee assistance program
• Vision insurance
• 401(k) matching
• Paid sick time