Information Security Program Manager

Resideo Technologies - Aurora, IL

Full-time - Senior

Aurora, IL

10,001+ employees

Electrical Equipment, Appliance, and Component Manufacturing

About the position

The Information Security Program Manager at Resideo will lead and enhance the organization's information security initiatives, ensuring compliance with various frameworks and managing risks effectively. This role is pivotal in driving the maturity of program execution and fostering a culture of security awareness across the company.

Responsibilities

• Perform periodic risk assessments/audits to ensure IT personnel are aware of established policies and procedures.
• Develop and implement programs to reduce risks in identified areas.
• Monitor and report to IT leadership on risk assessment results.
• Manage tracking and disposition of risks by leveraging agreed-upon action plans and timelines.
• Define and drive compliance programs to meet requirements across frameworks such as ISO 27001, PCI, SOX, ISO 22301.
• Develop, update, and implement Information Security policies, standards, and procedures that support security best practices.
• Execute cross-functional security and IT program plans to deliver expected business results.
• Measure and monitor the maturity level of established security programs and existing controls.
• Identify gaps in the information security policy framework and conduct impact analysis for improvements.
• Manage and facilitate the annual reviews of Governance artifacts including Policies, Standards, Processes, and Procedures.
• Serve as the key point of contact for IT during the annual SOX audit, tracking deficiencies and remediation activities.
• Mature the IT Resiliency (Disaster Recovery) program to ensure recovery from unexpected interruptions.
• Participate in annual Strategic Planning activities.
• Serve as the compliance subject matter expert in artificial intelligence and help mature strategic direction, policies, and controls.
• Champion compliance innovation, driving efficiency and automation.

Requirements

• 10+ years of experience in program and project management.
• 5+ years' leadership experience in program/project management across technology and complex IT programs.
• 3+ years of experience in Information Security risk management, strategy planning, technologies, and tools.

Nice-to-haves

• Familiarity with information security frameworks such as ISO 27001, PCI-DSS, NIST 800-53, and NIST Cybersecurity Framework.
• Ability to analyze complex problems and break them down into actionable parts.
• Ability to prioritize and execute tasks in an agile environment.
• Strong written, oral communication, and interpersonal skills.

Benefits

• Life and health insurance
• Life assistance program
• Accidental death and dismemberment insurance
• Disability insurance
• 401k Plan
• Vacation & holidays