Director, AppSec, IAM, and Vulnerability Management

Job DescriptionIt’s an exciting time to join International Flavors & Fragrances’ (IFF) Information Security Team. As Director, AppSec, IAM, and Vulnerability Management, you will oversee Application Security (AppSec), Identity and Access Management (IAM), Privileged Access Management (PAM), and Vulnerability Management (Vuln Mgmt). Reporting into the Chief Information Security Officer (CISO), you will oversee the design, build, and deployment of next-generation AppSec, IAM , PAM, and Vuln Mgmt capabilities.You will be accountable for establishing an enterprise Information Security stance in these domains through policy, architecture, tool selection/implementation, and change management processes. You will lead projects and initiatives in these domains to provide enterprise solutions that are scalable and adaptable with the ever-changing business needs and industry demands. You will significantly impact by interfacing with Information Technology peers and with business leaders to both share the AppSec, IAM, PAM, and Vuln Mgmt visions with those individuals, and to solicit their involvement in achieving enterprise security through information sharing and cooperation.About You:To be successful in this role you must have significant experience in Application Security (AppSec), Identity and Access Management (IAM), Privileged Access Management (PAM), and/or Vulnerability Management (Vuln Mgmt). You must have some experience in Information Security Architecture strategy/planning and technology innovation/acquisition. You will be expected to demonstrate strong strategic agility, business acumen, creative thinking, stakeholder management, collaboration tendencies, and influence skills.You will spend your time…Ensuring the planning, development, implementation, and maintenance of our AppSec, IAM, PAM, and Vuln Mgmt programs, including partnering directly with stakeholders in a multi-disciplined team structure to design and deploy strategies and solutions across a variety of vendor platforms.Acting as an AppSec, IAM, PAM, and Vuln Mgmt thought leader, consistently researching new ways to improve operations and overall strategy.Ensuring adherence to Information Security Controls, Policies and Standards with a focus on automation and control, for AppSec, IAM, PAM, and Vuln Mgmt.Assessing the current IT architecture, business needs, and future requirements as they relate to AppSec, IAM, PAM, and Vuln Mgmt.Determining Information Security requirements by evaluating business strategies and requirements, researching information security standards, conducting system security and vulnerability analyses and risk assessments, studying architectures/platforms, identifying integration issues, and preparing cost estimates.Verifying that processes and systems comply with any laws or regulatory requirements from local or national governments.Preparing for, and potentially presenting at, the Information Security Steering Committee, Executive Committee, and Board of Directors meetings.Preparing senior-level technical reports for executive management.Engaging in ongoing communications with peers in Information Technology and the various business groups to ensure enterprise wide understanding of Information Security goals, to solicit feedback and to foster cooperation.Managing relationships with third party service providers, including negotiation of contract language.Maintaining up-to-date knowledge of the Information Security industry, including awareness of innovative information security solutions/processes, emerging standards, and new threat vectors by reading professional publications, maintaining personal networks, and participating in professional organizations.Job RequirementsRequired Skills:Strong interpersonal communication skills, analytical abilities, detail focused, quality focused, and problem-solving skills, as well as broad knowledge of business functions, information technologies, and security and compliance practice on a global level.A demonstrated ability to integrate various information security, network and data protection technologies and controls into a cohesive solution that sufficiently mitigates risk. Required Experience:Demonstrated experience in enterprise solutions and implementation of technology and process solutions to reduce the potential risk of data compromise and network viability.Significant experience in information and/or network security, including hands on experience in Application Security tools, Identity and Access Management platforms, Privileged Access Management platforms, and Vulnerability Management platforms.Proven working experience in AppSec, IAM, PAM, and/or Vuln Mgmt.Demonstrated experience in delivering comprehensive solutions to complex security issues on a global scale.Confidence in leading diverse matrix teams independently, making decisions daily as it relates to the successful delivery of the program. Ability and insight to know when critical decisions must be raised to senior level and/or business unit management quickly to ensure that the program remains on track.Strong knowledge of Application Security tools and concepts, including Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Penetration Testing.Strong knowledge of identity systems, directory services, role-based access control, multi-factor authentication, and SSO & related standards (e.g. SAML, OAUTH, NTLM, LDAP, Kerberos, PKI, etc.).10+ years of demonstrated Information Security experience.Preferred: Bachelor’s and/or Master’s degree in Information Security, Computer Science, Engineering, Technology or a related technical field.Preferred: CISSP or similar information security certificate (e.g. CRISC, CISA, CEH, CISM).Preferred: Experience in pharmaceuticals, manufacturing, or other regulated industries. Leadership Behaviors:DRIVE INNOVATION. Generate new/unique solutions and embrace new ideas that further secure our business.OWN. Deliver results, creating value for our Brands, our Systems, our customers, and our key stakeholders.INSPIRE OTHERS. Inspire people to deliver our mission and vision, demonstrate passion, and enable our customers to believe in our vision too.COLLABORATE. Enhance Information Security team accomplishments and competency by supporting/mentoring less experienced team members, teaching improved processes, and managing engineers, outsource vendors, partners, auditors, and other persons tasked with maintaining Information Security.We are IFF. We are the catalyst for discoveries that spark the senses and transform the everyday. IFF is a leading innovator of sensorial experiences that move the world. At the heart of our company, we are fueled by a sense of discovery, constantly asking "what if?" That passion for exploration drives us to co-create unique scents and tastes in fine fragrances and beauty, detergents and household goods, as well as beloved foods and beverages. Our thousands of team members globally take advantage of leading consumer insights, research and development, creative expertise, and customer intimacy to develop differentiated products.