Director of Information Security

Company: Fortress Group
Location: Austin
Posted on: March 18, 2023

Job Description:

Under the direction of the CTO, this individual is responsible for leading Information Security, IT Infrastructure, Client Diligence Requests, and spearheading the InfoSec portions of certifications such as SOC2 and ISO 27001The right person will be an advocate for the security needs of our organization and will be responsible for both the development and implementation of a comprehensive security and resiliency strategy to mitigate outside threats and ensure our assets. You will also be the go-to when our enterprise clients want diligence for our information security practices.You will ensure business alignment with executive team members and will anticipate the IT needs of our business. In this role, you will be leading IT Infrastructure, Security, and client Due Diligence requests as well as projects for improving our business.We are a Mac heavy environment with both Microsoft and Apple machines distributed primarily around three office locations with some remote employees as well. We make heavy use of Rippling for monitoring and device management - expect to administrate the Rippling system as well as develop new automation within the platform.Join us in contributing to the creation and delivery of a high-value enterprise IT operations program across Fortress.Responsibilities

• Ensure compliance with our Information Security program; build guidelines, policies, standards, and regulations.
• Create, develop, maintain, and ensure adherence to policies and procedures related to IT security/privacy and systems resiliency
• Create, manage, and oversee an information risk management program with appropriate risk assessment processes and business associate oversight.
• Create, develop, and oversee resiliency, system downtime, disaster recovery, and business continuity programs, processes, and technology.
• In partnership with legal and compliance departments, establish a shared vision with employees including providing regular updates on the status of the Information Security Program to executives.
• Create exceptional customer relations and maintain relationships through continuous improvement efforts.
• Establish appropriate metrics to track improvement of the security posture.
• Oversee the dissemination and implementation of cybersecurity policies, standards, best practices, and education to technical personnel with privileged access.
• Construct and direct strategic roadmap of IT infrastructure, security, and service delivery operations by developing goals and objectives, policies, procedures, and processes as needed.
• Partner closely with leadership to ensure close alignment and support for any technical, security, or privacy aspects of contracts, systems, and related information security needs.
• Conduct research and provide updates on industry trends, standards, and practices.
• Create a risk-based process for vendor risk management.
• Maintain a current understanding of the cyber threat landscape, building and maintaining a system resiliency enterprise function through training people, building processes, and implementing new technologies.Qualifications
  • Bachelor's degree in Computer Science, Information Systems Management, or related field.
  • 6+ years of related experience
  • Technical knowledge of different types of networking, applications, and operating systems.
  • Strong attention to detail.
  • Excellent interpersonal skills and professional demeanor.
  • Excellent verbal and written communication skills.Bonus
    • One or more of the following professional certifications: CCISO, CISSP, CISM, CGEIT, SANS/GIAC, CHISL, CBCP, BCM, ABCP
    • Experience as an IT project manager.
    • Disaster Recovery and Business Continuity oversight experience.We Offer:
      • Highly competitive compensation packages.
      • Comprehensive benefits, including 100% paid medical insurance coverage for you and your dependents.
      • Unlimited PTO.
      • Professional growth and development.
      • 401k.

Keywords: Fortress Group, Austin , Director of Information Security, Executive , Austin, Texas