Director, Global IT Security, Compliance & Privacy

Company: CTI Education Group
Location: Bridgewater
Posted on: February 26, 2021

Job Description:

Job Description - Director, Global IT Security, Compliance & Privacy (200KV) Job Description Director, Global IT Security, Compliance & Privacy - ( 200KV ) Description Description:

• The IT Information Security, Compliance, and Privacy Leader will be responsible for: --- Establishing the strategy and overall policies, standards, procedures, and multi-year roadmap for the information security function at Amneal on a global basis. She will recommend Information Security investments to mitigate cyber risks, strengthen defenses and reduce IT related vulnerabilities. This position is responsible for the design, implementation, and maintenance of controls and procedures to ensure the integrity and security of all computer-based systems and networks across all technical platforms at Amneal. This is a strategic as well as hands-on position and will work closely with other business groups and stakeholders to ensure the protection of information and assets including data, systems, databases, networks and other resources. --- Ensuring compliance with Sarbanes-Oxley requirements for computer operations, access control, and change management --- Defining policies and procedures for compliance with GDPR, CCPA, and Segregation of Duty requirements. --- A key element of this role is communicating security at a strategic level to executive management, the Audit Committee of the Board of Directors, the Board of Directors, and evangelizing security across the business to drive adoption of security best practices. --- This role will manage a small team of dedicated resources and a set of managed security service providers.
  Essential Functions:
  • Work with senior leaders across the business to assess and communicate acceptable levels of risk. Develop and implement a strategic, long-term information security strategy and roadmap to ensure that Amneal's information assets are adequately protected. Identify, evaluate, and report on information security risks, practices, and projects to the Executive Leadership Team and the Board of Directors, and provide subject-matter expertise on security and data privacy standards and best practices (e.g., SOX, PCI, CCPA, GDPR).
  • Lead the development of up-to-date information security policies, procedures, standards and guidelines, and oversee their approval, dissemination, and maintenance. Ensure that the security management program is in compliance with applicable laws, regulations, and contractual requirements. Act as the champion for the enterprise information security program and foster a security-aware culture. Develop, implement and monitor an ongoing cybersecurity education program for all employees.
  • Oversee the evaluation, selection, and implementation of information security solutions that are innovative, cost-effective, and minimally disruptive. Partner with enterprise architects, infrastructure, and application teams to ensure that technologies are developed and maintained according to security policies and guidelines. Partner with Legal department to assist in eDiscovery. Develop, mentor, and manage a high performing staff of information security professionals.
  • Manage regular intrusion detection and vulnerability reporting, internal and external IT audit groups reviews, and the coordination of all required fixes. Oversee incident response planning and the investigation of security breaches, and assist with any associated disciplinary, public relations, and legal matters. Develop metrics to measure the effectiveness of the security management program, and increase the maturity of the program over time.
  • Liaise with law enforcement and other advisory bodies as necessary to ensure that the organization maintains a strong security posture. Oversee and lead the creation, communication, and implementation of a process for managing vendor risk and other third-party risk. Lead due diligence and post-integration activities related to information security for all M&A activity. Qualifications Education:
    • Bachelors Degree (BA/BS) Bachelor's degree in Computer Science, IT, Engineering or a related discipline - Required
      • Master Degree (MS/MA) related discipline - Preferred Experience:
        • 12 years or more in Minimum 12+ years of hands-on experience within the information security field
          • 12 years or more in 12+ years of experience managing a function and/or people with a minimum of 5+ years of management experience in an information security role managing Security Analysts.
            • 5 years or more in Prior experience with information security frameworks.
              • 2 years or more in experience managing a global team
                • 2 years or more in Proven experience with current IT security technologies Skills: Specialized Knowledge:
                  • Demonstrated understanding of technological trends and developments in the areas of information security, risk management, web architectures and cloud computing.
                    • Knowledge of security, risk, and control frameworks and standards, such as ISO27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO, and ITIL Licenses:
                      • CISSP, CISM, CISA or other relevant Security Certifications --Preferred

Keywords: CTI Education Group, Trenton , Director, Global IT Security, Compliance & Privacy, Executive , Bridgewater, New Jersey