Deputy Information Security Officer

$210,000 - $210,000/Yr

Sorenson - Salt Lake City, UT

Full-time - Senior

Remote - Salt Lake City, UT

Professional, Scientific, and Technical Services

About the position

The Deputy Information Security Officer will assist the Chief Information Security Officer (CISO) in developing and implementing the overall information security strategy for the organization. This role involves providing leadership to the information security team, managing security operations, ensuring compliance with regulatory requirements, and engaging with stakeholders to communicate security risks and strategies. The position requires a strong focus on program management, risk management, and the development of security policies and procedures, while also mentoring and developing team members.

Responsibilities

• Assist the CISO in developing and implementing the overall information security strategy.
• Provide leadership and direction to the information security team, ensuring alignment with organizational goals.
• Collaborate with other departments to integrate security measures into business processes and initiatives.
• Provide regular reporting on the status of the information security program to enterprise risk teams, senior business leaders, and the board of directors.
• Develop, socialize, and coordinate approval and implementation of security policies.
• Liaise with the enterprise architecture team to ensure information security requirements are implicit in architectures.
• Direct the creation of a targeted information security awareness training program for all employees and establish metrics to measure its effectiveness.
• Oversee security operations functions such as threat monitoring, incident response, and vulnerability management.
• Ensure effective management of security technologies, including firewalls and endpoint protection.
• Lead efforts to detect, respond to, and recover from security incidents and breaches.
• Assist in the development and maintenance of the organization's information security risk management framework.
• Ensure compliance with relevant regulatory requirements and industry standards.
• Conduct regular security assessments and audits to identify and mitigate risks.
• Develop, implement, and maintain information security policies, standards, and procedures.
• Ensure that security policies are effectively communicated and enforced across the organization.
• Mentor and develop a high-performing information security team.
• Foster a culture of continuous improvement, innovation, and collaboration within the security team.
• Identify training and development opportunities for team members.
• Act as a key point of contact for information security-related matters across the organization.
• Engage with senior leadership to communicate security risks and strategies.
• Build and maintain relationships with external partners, including vendors and regulators.
• Coordinate the development of cyber/physical incident response plans and procedures.

Requirements

• 4 Year / Bachelors Degree in a related field or equivalent experience accepted.
• Minimum Certification: CISSP and at least 1 of the following: CRISC, CISA, CISM, or similar.
• 7 years minimum of demonstrated experience and success in senior leadership roles in risk management, information security, and IT or OT security.

Nice-to-haves

• Experience successfully executing programs that meet the objectives of excellence in a dynamic business environment.
• Experience with contract and vendor negotiations.
• Strong technical background across a broad base of information security tools.

Benefits

• Paid Vacation Time and Paid Sick Time and Paid Holidays
• 401k 6% match with immediate vesting
• Nationwide Medical Insurance plans and coverage (Medical, Dental/Orthodontia, Vision)
• TeleDoc
• HSA company match
• 3 Medical plan options including a Low Deductible PPO Medical Plan Offering
• Employee Assistance Program
• Engaged Employee Resource Groups
• Outstanding Learning and Career Development Opportunities