VP, IT Security & Risk Management (Hybrid)

Allegis Group - Morristown, NJ

Full-time - Senior

Morristown, NJ

10,001+ employees

Administrative and Support Services

About the position

The VP of IT Security & Risk Management is responsible for leading a team of security professionals within the Information Technology Services (ITS) Department. This role involves overseeing the daily activities of the information security, cyber risk management, and incident response teams, while also contributing to the strategic direction of the department. The position requires a strong focus on evaluating and enhancing the enterprise-wide information security program, managing security incidents, and ensuring compliance with security policies and procedures.

Responsibilities

• Leads the day-to-day activities of the information security, cyber risk management, and incident response team.
• Evaluates the enterprise-wide information security program, identifies gaps, executes short-term corrective plans, develops long-range strategies, and reports on program health to stakeholders.
• Leads planning and response to disaster recovery events and security incidents, managing and communicating incidents to key stakeholders.
• Establishes, updates, and delivers security awareness and training programs across the enterprise.
• Develops, maintains, and enforces information security policies and procedures in alignment with risk appetite and compliance goals.
• Oversees all security audits and participates in technical aspects of IT-related audits.
• Collaborates with business and IT leaders to assess and act on information security risks, reporting to stakeholders as appropriate.
• Responsible for hiring, development, and performance management of staff within the security organization.
• Plans, administers, and manages the information security and risk management budget.

Requirements

• 10+ years of IT experience with at least 7 in information security and/or information risk management.
• 5+ years of leadership experience managing managers or directors.
• Bachelor's degree or greater in a related discipline preferred.
• Security-specific certifications (CISSP, GIAC, CISM, etc.) strongly preferred.
• Excellent communication skills with experience presenting to staff and leaders across technology and business areas, including executive leadership.
• Experience planning and controlling projects that enhance security program maturity.
• Expert level knowledge of current IT security techniques, industry trends, suppliers, and technology.
• Knowledge of risk management & cyber-security frameworks including NIST-CSF, NIST-800, ISO-27000, BASEL II, EU DPD, PCI D, HIPAA, SOX.

Benefits

• Competitive compensation and performance awards
• Health benefits
• Retirement savings
• Professional development opportunities
• Flexible schedules to support health, wealth, and well-being