Chief Information Security Officer

Company Overview When it comes to IT solution providers, there are a lot of choices. But when it comes to providers with innovative and differentiating end-to-end service offerings, there’s really only one: Zones – First Choice for IT. Zones is a Global Solution Provider of end-to-end IT solutions with an unmatched supply chain. Positioned to be the IT partner you need, Zones, a Minority Business Enterprise (MBE) in business for over 35 years, specializes in Digital Workplace, Cloud & Data Center, Networking, Security, and Managed/Professional/Staffing services. Operating in more than 120 countries, leveraging a robust portfolio, and utilizing the highest certification levels from key partners, including Microsoft, Apple, Cisco, Lenovo, Adobe, and more, Zones has mastered the science of building digital infrastructures that change the way business does business ensuring whatever they need, they can Consider IT Done. Position Overview Reporting to the Vice President of IT Infrastructure and Security the Chief Information Security Officer’s role is to provide vision and leadership for developing and supporting security initiatives. The Chief Information Security Officer directs the planning and implementation of enterprise IT systems, business operations, and facility defenses against security breaches and vulnerability issues. This individual is also responsible for auditing existing systems, while directing the administration of security policies, activities, and standards. What you will do as the Chief Information Security Officer (CISO) The requirements below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. This job description is not intended to be a comprehensive list of the duties and responsibilities of the position, and the duties and responsibilities may change without notice. Strategy & Planning Participate as a member of the senior management team in governance processes of the organization’s security strategies. Lead strategic security planning to achieve business goals by prioritizing defense initiatives and coordinating the evaluation, deployment, and management of current and future security technologies using a risk-based assessment methodology. Develop and communicate security strategies and plans to executive team, staff, partners, customers, and stakeholders. Assist with the design and implementation of disaster recovery and business continuity plans, procedures, audits, and enhancements. Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices. Acquisition & Deployment Define and communicate corporate plans, procedures, policies, and standards for the organization for acquiring, implementing, and operating new security systems, equipment, software, and other technologies. Operational Management Act as advocate and primary liaison for the company’s security vision via regular written and in-person communications with the company’s executives, department heads, and end users. Work closely with the IT department on corporate technology development to fully secure information, computer, network, and processing systems. Manage the administration of all computer security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and anti-virus software. Ensure the administration of the facility’s security systems and their corresponding equipment or software, including fire alarms, locks, intruder detection systems, sprinkler systems, and anti-theft measures. Develop, track, and control the security services annual operating and capital budgets for purchasing, staffing, and operations. Ensure that facilities, premises, and equipment adhere to all applicable laws and regulations. Recommend and implement changes in security policies and practices in accordance with changes in local or federal law. Creatively and independently provide resolution to security problems in a cost-effective manner. Assess and communicate all security risks associated with any and all purchases or practices performed by the company. Collaborate with IT leader, privacy officer, and HR to establish and maintain a system for ensuring that security and privacy policies are met. Where necessary, supervise recruitment, development, retention, and organization of security staff in accordance with corporate budgetary objectives and personnel policies. Promote and oversee strategic security relationships between internal resources and external entities, including government, vendors, and partner organizations. Remain informed on trends and issues in the security industry, including current and emerging technologies and prices. Advise, counsel, and educate executive and management teams on their relative importance and financial impact. What you will bring to the team Education & Certification University degree in Computer Science or Business Administration required. Master’s or PhD degree in one these fields or Information Security preferred. Certifications: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP) or equivalent preferred. Knowledge & Experience 10+ years of experience managing and/or directing an IT and/or security operation. 15+ years of experience working in the IT industry. Proven experience in planning, organizing, and developing IT security and facility security system technologies. Experience in planning and executing security policies and standards development. Excellent knowledge of technology environments, including information security, building security, and defense solutions. Considerable knowledge of business theory, business processes, management, budgeting, and business office operations. Substantial exposure to data processing, hardware platforms, enterprise software applications, and outsourced systems, including virtual and Cloud based systems. Good understanding of computer systems characteristics, features, and integration capabilities. Experience with systems design and development from business requirements analysis through to day-to-day management. Excellent understanding of project management principles. Superior understanding of the organization’s goals and objectives. Demonstrated ability to apply IT in solving security problems. In-depth knowledge of applicable laws and regulations as they relate to security. Personal Attributes Proven leadership ability. Ability to set and manage priorities judiciously. Excellent written and oral communication skills. Excellent interpersonal skills. Strong negotiating skills. Ability to present ideas in business-friendly and user-friendly language. Exceptionally self‑motivated and directed. Keen attention to detail. Superior analytical, evaluative, and problem‑solving abilities. Exceptional service orientation. Ability to motivate in a team‑oriented, collaborative environment. Qualified candidates can expect a salary of $190,000-$220,000 Benefits Zones offers a comprehensive benefits package. While we’re committed to providing top‑tier solutions, we’re just as committed to supporting our own team. Our team members enjoy a variety of comprehensive benefits, including medical, dental and vision coverage, life insurance, disability insurance, voluntary accident, hospitalization and critical illness insurance options, a 401(k) plan with matching provision, and many more. Generally, Zones currently offers paid time off and personal sick leave in compliance to individual state requirements. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, age, genetic information, or pregnancy. Zones participates in E‑Verify. E‑Verify is a system that compares information from a team member’s Form I‑9 to federal records to confirm their eligibility to work in the United States. #J-18808-Ljbffr