Information Security Officer
New York, NYAll locationsNew York, NYPurchase, NYMorristown, NJConshohocken, PACharlotte, NCGarden City, New YorkLondon, United KingdomBoston, MassachusettsUSA - GA - AtlantaUK office Hybrid
Salary not listedJobFig found this opening at its original source and checks that it remains available.
About the role
Sompo has a unique opportunity for an Information Security Officer to join our Information Security team. This role will manage and continuously modernize our Information Security program for global operations, while maintaining alignment with external and corporate requirements. The Information Security Officer will manage more than 7,000 users, hundreds of developers and IT staff working in a range of technologies, more than 10,000 network devices and 75+ physical and cloud locations. This role will manage and continuously modernize our Information Security program for global operations, while maintaining alignment with external and corporate requirements. The Information Security Officer will manage more than 7,000 users, hundreds of developers and IT staff working in a range of technologies, more than 10,000 network devices and 75+ physical and cloud locations.
What you'll bring
- Minimum of 15 years of experience in a combination of technical, security, and risk management roles
- Minimum of 7 years in a senior management role within an information security function.
- Technical familiarity with security patterns, operations and controls for traditional (Windows), cloud, and SaaS environments Systematic thinking – understanding the place of security controls within the larger operating environment, anticipating issues and engaging colleagues to minimize disruption (or the potential for it).
- Structure projects and programs in risk-prioritized manner.
- Experience integrating regulatory requirements, corporate policies, and industry standards into operating procedures and designs Experience maintaining and communicating security strategy and technical architecture.
- Ability to translate operational metrics into meaningful KPIs and risk quantifiers.
- Excellent written, verbal and interpersonal communications with a range of audiences, including non-technical leaders, customers, regulators, and technical colleagues.
- Bachelor’s degree in computer science, information security, or a related field.
- Recognized information security certification (CISSP, CISM, etc.).
- Prior experience with adoption of FAIR Threat modeling within the SDLC Familiarity with DevSecOps processes, tooling, and controls Experience gaining and maintaining certifications like ISO 270 xx, SOC 2, etc.
- Knowledge of regional security data privacy regulations related to Minimization Encryption Cross-border data access
- At Sompo, we recognize that the talent, skills, and commitment of our employees drive our success.