Job Expired
This posting has expired and applications are no longer being received and this job does not show up on the main job list.
This posting has expired and applications are no longer being received and this job does not show up on the main job list.
| Location: | London, ON |
| Date Posted: | Nov 17, 2022 |
Job Description
Director, IT Security
Location: Anywhere in Canada (Remote)
Reports to: CIO
The Role: The Director, IT Security partners with the CIO, General Counsel, and other Information Security personnel to advance and execute the overall Cyber and Data Security activities. Candidates for this position should have significant cyber security experience and broad knowledge of IT system security, networking, operational security, data management, cloud, and latest security technology.
- Evaluate the threat landscape, current practices / tools, and define improvement recommendations for reducing the organization’s risk.
- Oversee and as necessary, personally manage the execution of security projects and improvement priorities.
- Review, adjust, and approve security policies and controls.
- Perform Information Security Compliance and audit activities, including regular reviews (e.g., penetration testing, access reviews) and the achievement of new certifications (e.g., SOC2, HIPAA)
- Engage on client Information Security related priorities, such as providing feedback on client proposals, client reviews and the oversight of contractual requirements related to security.
- Implement and maintain a security plan and policies suitable for a data and technology company operating across multiple industry verticals.
- Support Incident response priorities, including improving response plans and operational readiness.
- Provide oversight for external vendors and partners, including risk assessments, approvals, and periodic audits.
- Provide information security input on the design / development of new Products and technology platforms. Support the evaluation of third-party technology and service providers, as well as potential M&A opportunities.
- Work closely with other teams, such as the JD Power infrastructure and cloud team, as well as third party security service providers to help achieve the desired security goals and objectives.
- Manage day to day operations of the security team.
- A Degree or Diploma in Computer Science, IT Security, Information Technology, Information System
- At least 5 years of relevant management experience in the Information Security field.
- Experience managing Security projects and programs, including presenting recommendations to C-level leaders
- Experience with ISO 27002, ITIL and COBIT frameworks, as well as leading organizations in achieving security compliance (e.g. HIPAA, PCI, SOC2)
- Strong analytical, interpersonal, communication, writing and presentation skills.
- Experience in security-related project development and skills with ability to multitask in a cross-functional environment.
- Strong knowledge of key issues regarding IT Security and Information Risk Management (Data Security, Endpoint Security, Record Retention, Data Privacy, Identity and Access Management, etc.).
- Ability to work independently and manage multiple competing priorities.
- Self-motivated and Reliable team player who can work under pressure.
- AWS cloud security and architecture experience is a plus
- Information Security Certifications (e.g., Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP))
Truth that Transforms: At J.D. Power, we amplify the voice of the consumer, and help brands improve the value of their products and services. Our capabilities empower everyone in the global commerce ecosystem, enabling better purchase decisions – and better business results. We understand that the customer experience is vital and that simply measuring it is not enough. Our analysts focus on driving results that improve customer loyalty and advocacy. Our success is driven by how much we help companies improve the customer experience. But data is only as powerful as the analysis and insights tied to it—and we put that power in the hands of our clients through our interactive reporting platforms. The data, analytics, insights, best practices, and action plans clients need are available whenever and wherever they need them, to help them make data-driven decisions that will improve their customer experience and drive positive financial results.
J.D. Power’s recruitment efforts are aligned with the company's commitment to provide opportunities rooted in diversity, inclusion, and equality.
Our Vision: To be the leader in providing advanced data solutions that empower industry transformation.
Our Mission: We unite industry leading data and insights with world-class technology to solve our clients’ toughest challenges.
Our Values: We are Truth Finders, Change Makers and Team Driven.
We are dedicated to leveraging comprehensive and equitable practices which contribute to the overall success of the company and its employees. We invite you to learn more about our DE&I efforts.
To all recruitment agencies: J.D. Power does not accept unsolicited agency resumes and we are not responsible for any fees related to unsolicited resumes.
Apply