Director-Network & Information security

Network & Infrastructure Security Governance

1. Identify, implement and operationalize metrics, dashboards, scorecards, and tracking to consistently measure the current state of cybersecurity across Network & Infrastructure, leveraging industry best practices and standards.
2. Ensure effectiveness and coverage of the Security Policies and Controls of Network & Infrastructure, prioritizing risk level.
3. Instill ownership and accountability for security-based metrics and drive increased maturity, visibility, and subject-matter expertise for all segments.
4. Develop action plans jointly with all stakeholders to remediate deviations, providing necessary support to close on all key items.
5. Champion a highly collaborative work model with an aptitude of building and maintaining relationships across different teams at multiple senior levels, internally and externally.
6. Develop awareness, training & compliance programs focused on Network & Infrastructure Cyber Security practices, leveraging Security Development program.
7. Ensure Security posture of Network & Infrastructure, e.g., access management, vulnerabilities remediation, etc.
8. Coordinate necessary activities with our CISO Cyber Security organization: pen testing, incident response, data collection, etc.

Application Security & Risk Management

1. Drive automation and orchestration of all security tools for visibility and prevention.
2. Interpret the Information Technology threat landscape, security industry best practices, industry threat vectors, new technologies impacting security operations, etc.
3. Technical expert in business applications, IT infrastructure and architecture - Defense in Depth Architecture and Practices.
4. Experience implementing and monitoring security controls, vulnerability management, penetration testing, and identity/access management best practices.
5. Track record with leading high performance operational teams.
6. Background with different cloud computing platforms and the cloud security framework.
7. Manage the budget for security testing, operational and monitoring tools expenses.
8. Recruit, train, and lead security operations team members.
9. Create and communicate security operations metrics, incidents, investigations, etc.
10. Determine SLAs for detecting issues internally and with our external partners.
11. Assist in Crisis Management, Ransomware Recovery and Business Continuity planning.
12. Prepare reports and make presentations on internal investigations, losses, or violations of regulations, policies, and procedures.
13. In partnership with the CISO team, identify, investigate and resolve global security breaches/incidents.

Security Automation Platforms

1. Develop and maintain IT Applications, Network & Infrastructure Security reporting dashboards, scorecards and maturity models used to measure our Cyber practice, with a focus on data integrity, working with the SRE teams.
2. Identify, build and maintain the automation platforms supporting Enterprise Network, On-Prem Infrastructure, Datacenters and Cloud organizations in their Cyber practice.
3. Drive a culture of Security by Design, automation to scale cyber security practices.

Industry Engagements & Cyber Transformation

1. Establish partnerships with industry leaders and forums to constantly assess new trends and solutions.
2. Lead transformation towards Security by Design and Zero Trust principles for Network & Infrastructure.
3. Operationalize future Cyber Security Architectures and Policies related to Network & Infrastructure, constantly raising our maturity and level of protection.

Leadership

1. Lead a team of cybersecurity engineers with both network & infrastructure, security engineers, threat intelligence analysts, security champions and risk management personnel.
2. Focus on employee hiring, career development, rotation and succession planning.
3. Motivate staff through servant leadership.
4. Identify opportunities for automation, partnering with our India team.
5. Stakeholdering with multiple external teams , with sometimes competing, organizationally separate groups and goals.
6. Effective communication of complex technical subjects to non-expert, cross-functional peers, with effective storytelling and proficiency when presenting to leadership.
7. Cross-functional collaboration and relationship building to achieve wider, organizational strategic goals.

You’ll need to have:

1. Bachelor’s degree in network engineering, computer science, IT infrastructure or related discipline.
2. Ten or more years of relevant work experience in Security, IT, and/or Network.
3. Strong knowledge of SDLC and DevSecOps
4. One or more of the following certifications - CISSP, CCIE, CCSK, TOGAF, SABSA
5. Experience managing a team of experienced, technical professionals.
6. Willingness to travel.