CISO
The CISO will be responsible for supervising all cybersecurity matters across the Company in accordance with cybersecurity laws and best practices as well as state regulatory rules. This individual will provide oversight to ensure all aspects of the Company's Cybersecurity Program are current and in adherence to regulatory requirements. Specifically, this role will complete recommendations to remediate identified risks, review the Cybersecurity policy on a yearly basis and update as necessary, retain all evidence of the review performed (incl. actions taken, systems analyzed, reports produced), and provide reporting to leadership on the Cybersecurity program. This individual will be responsible for selection of comprehensive cybersecurity controls most appropriate to the firm’s technology and threat environment and implement corresponding defense strategies. Finally, the head of Cybersecurity will be responsible for supervising risk from third-party vendors and system dependencies.
Responsibilities:
• Engage and partner with Operations and Engineering teams to ensure solutions are built with appropriate security considerations.
• Provide Cybersecurity strategic guidance and aid in strategic decision making with a Cyber lens.
• Serve as the point person for contact with the Company’s regulators during audits and throughout the year for any cybersecurity matters.
• Review and approve cybersecurity related procedures, policies and written supervisory procedures supporting the Company.
• Continuously identify and detail asset vulnerabilities and internal and external threats, and audit critical security and continuity practices.
• Drive selection, implementation and monitoring cybersecurity controls appropriate to the Company’s systems (e.g., all communications, physical office, encryption, remote customer access).
• Implement adherence to cybersecurity measures across the company.
• Other duties as assigned.
Qualifications:
• BA/BS in the relevant fields (Computer Science, Programming, etc.); Masters preferred.
• 10+ years of experience in cybersecurity.
• Extensive experience working with Security, DevOps, and Incident Response teams.
• Experience working in a highly regulated industry and working with regulators.
• Direct to consumer experience preferred.
• Familiarity with AWS or other cloud systems.
• Familiarity with Docker, Kubernetes, or other container based systems.
• Proficiency in Python, Golang, or similar dynamic programming language.
• Experience with data warehousing and data analysis.
Responsibilities:
• Engage and partner with Operations and Engineering teams to ensure solutions are built with appropriate security considerations.
• Provide Cybersecurity strategic guidance and aid in strategic decision making with a Cyber lens.
• Serve as the point person for contact with the Company’s regulators during audits and throughout the year for any cybersecurity matters.
• Review and approve cybersecurity related procedures, policies and written supervisory procedures supporting the Company.
• Continuously identify and detail asset vulnerabilities and internal and external threats, and audit critical security and continuity practices.
• Drive selection, implementation and monitoring cybersecurity controls appropriate to the Company’s systems (e.g., all communications, physical office, encryption, remote customer access).
• Implement adherence to cybersecurity measures across the company.
• Other duties as assigned.
Qualifications:
• BA/BS in the relevant fields (Computer Science, Programming, etc.); Masters preferred.
• 10+ years of experience in cybersecurity.
• Extensive experience working with Security, DevOps, and Incident Response teams.
• Experience working in a highly regulated industry and working with regulators.
• Direct to consumer experience preferred.
• Familiarity with AWS or other cloud systems.
• Familiarity with Docker, Kubernetes, or other container based systems.
• Proficiency in Python, Golang, or similar dynamic programming language.
• Experience with data warehousing and data analysis.