Dir, Enterprise IT Security and Compliance -Valent North America

$200,000 - $240,000/Yr

Valent North America LLC - San Ramon, CA

Full-time - Senior

San Ramon, CA

About the position

The Director of Enterprise IT Security and Compliance at Valent North America LLC is responsible for implementing and managing the enterprise information security and IT compliance office across the Valent Group Companies. This role involves identifying, evaluating, and reporting on legal, regulatory, IT, and cybersecurity risks to senior leadership, while establishing and maintaining the information security program and compliance policies to protect information assets and technology.

Responsibilities

• Lead Enterprise IT security and internal IT compliance functions according to NIST/CFS and Sarbanes Oxley standards.
• Review, update, implement, and automate IT security policies, protocols, and processes.
• Ensure consistent and high-quality information security management across companies supporting business goals.
• Create a 3-5-year roadmap for cybersecurity to improve maturity and infrastructure.
• Conduct regular vulnerability scanning and penetration testing exercises.
• Develop an information security vision and strategy aligned with organizational priorities.
• Work with parent company and regional headquarters to implement overarching company policies and internal IT controls.
• Develop, implement, and monitor a comprehensive information security program.
• Facilitate information security risk assessment and risk management processes with business units.
• Manage information security incidents and events to protect corporate IT and group company assets.

Requirements

• Bachelor's or master's degree in computer science, information systems, business administration, or related field.
• CISSP, CISM, CCSP, or SSCP certification.
• 10+ years of practical IT Security work experience with enterprise security technologies.
• Strong understanding of implementing Sarbanes Oxley and internal IT compliance policies globally.
• Excellent written and verbal communication skills.
• Strong analytical skills and project management skills.

Nice-to-haves

• Experience with cybersecurity tools such as Tanium, Palo Alto, and CrowdStrike.
• Knowledge of incident response frameworks and disaster recovery policies.

Benefits

• Disability insurance
• 401(k) matching
• Volunteer time off
• High-quality healthcare options
• Life and disability insurance
• Generous time off
• Flexible work arrangements