We are seeking a highly skilledSecurity and Compliance Team Leadto oversee the development, implementation, and management of security and compliance programs across the organization. This role will ensure adherence to regulatory requirements, minimize risks, and promote a culture of security awareness. The ideal candidate will lead a team of professionals, providing expertise in security protocols, compliance standards, and risk management.
Responsibilities:
Security Program Management:
Develop, implement, and maintain the organization's information security strategy and policies.
Identify and mitigate security risks while ensuring data protection and integrity.
Oversee security infrastructure, monitoring systems, and incident response protocols.
Compliance Management:
Ensure compliance with regulatory frameworks, industry standards, and organizational policies (e.g., GDPR, ISO 27001, HIPAA, NIST).
Perform regular compliance audits and assessments to identify gaps and drive remediation efforts.
Lead efforts to achieve and maintain certifications relevant to the organization's industry.
Team Leadership and Collaboration:
Manage and mentor the Security and Compliance team, fostering professional growth and development.
Collaborate with IT, legal, and operations teams to align security and compliance goals with business objectives.
Act as a liaison between the organization and regulatory bodies during audits or investigations.
Risk Management and Incident Response:
Conduct regular risk assessments to identify vulnerabilities and prioritize mitigation strategies.
Lead the development and execution of incident response plans for security breaches or non-compliance events.
Ensure timely reporting and resolution of security incidents.
Security Awareness and Training:
Develop and implement security awareness training programs for employees.
Promote a culture of security and compliance across all levels of the organization.
Stay updated on emerging threats, regulations, and technologies to inform training and strategy.
Reporting and Documentation:
Maintain detailed records of security and compliance activities, including policies, incidents, and audits.
Prepare regular reports for senior management on the status of security and compliance initiatives.
Track and report key performance indicators (KPIs) to measure the effectiveness of security programs.
Key Requirements:
Qualifications:
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Certifications such as CISSP, CISM, CISA, or equivalent are highly desirable.
Experience:
5+ years of experience in information security, compliance, or risk management, with at least 2 years in a leadership role.
Demonstrated success in managing security programs and ensuring regulatory compliance.