Sign upLog in
See more jobs

Associate Director of Information Security

NR Consulting LLC
  • New Haven, CT
  • Quick Apply
15 days ago

Job Description

Job title: Associate Director of Information Security
Location: New Haven, CT/ Hybrid

Overview
The Associate Director of Governance, Risk, and Compliance (GRC) is a resourceful and experienced information security leader responsible for managing, and continuously improving, the organization s information security GRC program. This position provides strategic direction and operational oversight for the organization s information security governance framework, including the development and maintenance of security policies, standards, and procedures; coordination of security audits and assessments; management of information security risks and exceptions; oversight of third-party security risk; and delivery of meaningful program reporting to leadership and governance committees. The Associate Director ensures that the organization s information security governance practices remain aligned with applicable regulatory requirements, contractual obligations, industry standards, and organizational risk objectives. This individual reports to, and works closely with, the Deputy CISO and partners across the organization with Enterprise Risk Management, Internal Audit, Legal, Privacy, Compliance, Information Technology, and other business leaders to promote effective governance, strengthen risk management, and support the continuous improvement of the information security program.

Core Responsibilities
  • Lead, develop, mentor, and retain a high-performing Information Security GRC team.
  • Establish team objectives, performance measures, responsibilities, and development plans.
  • Develop, maintain, and continuously improve the organization s information security governance, risk, and compliance strategy, operating model, and multi-year roadmap.
  • Keep up with ongoing trends and changes within the GRC community and make sure that the organization is up-to-date with the latest relevant methods and practices.
  • Develop, maintain, and manage information security policies and standards.
  • Partner with colleges within Information Security, technology and other function areas to ensure security standards are practical, measurable, and aligned with organizational requirements.
  • Maintain the information security risk register and exception process to ensure security risks are appropriately documented, assigned, prioritized, tracked, and reported.
  • Partner with Enterprise Risk Management to align information security risk methodologies, reporting, and governance with the organization s broader enterprise risk management framework.
  • Develop and maintain an information security control framework aligned with applicable regulatory requirements, contractual obligations, industry standards, and organizational risk priorities.
  • Oversee information security compliance activities related to applicable laws, regulations, standards, frameworks, and customer requirements, which may include NY-Client, COBIT, various NIST frameworks, amongst others.
  • Coordinate and manage information security audits, assessments, and examinations.
  • Serve as the primary Information Security liaison for Internal Audit, External Audit, and other regulatory examiners.
  • Establish key indicators, reports, dashboards, control metrics, and security maturity measures to assess the effectiveness of the information security program.
  • Develop, maintain, and manage information security third-party risk activities.
  • Establish governance processes to evaluate security risks associated with new technologies, major business initiatives, cloud services, significant system changes, and strategic projects.
  • Partner with Privacy, Legal, and Compliance to address overlapping security, privacy, regulatory, and contractual requirements.
  • Maintain awareness of changes to cybersecurity laws, regulations, standards, industry expectations, and emerging risk trends, and assess their potential impact on the organization.

Skills Qualifications
Required:
  • Extensive knowledge of Governance, Risk, and Compliance practices
  • Ability to process and understand complex information relevant to cyber security initiatives
  • Ability to create detailed documentation and workflow diagrams
  • Possess the ability to multi-task between projects
  • Exceptional written, oral, and interpersonal communication skills
  • Understanding of the NIST CSF framework and other associated cyber security standards
  • Ability to drive team outcomes through tight deadlines and prioritization of tasks
  • Extensive knowledge of legal and regulatory compliance standards and requirements such as NYDFS, GDPR, CCRA, and CCPA.

Preferred:
  • CISSP, CISM, CRISC, CISA, or other security management certifications

Education
Required:
  • Five years of relevant experience within the Governance, Risk, and Compliance field.
  • Proven working experience performing the functions listed under the core responsibilities section.

Preferred:
  • Bachelor s degree in information security, Cyber Security, Computer Science, or another related field
  • Insurance and financial services industry experience is a plus

Numbers & Facts

LocationNew Haven, CT

Skills

  • Auditingunmatched
  • CISA - Certified Information Systems Auditorunmatched
  • CISM - Certified Information Security Managerunmatched
  • CISSP - Certified Information Systems Security Professionalunmatched
  • Cloud Computingunmatched
  • Communication Skillsunmatched
  • Computer Scienceunmatched
  • Continuous Improvementunmatched
  • Contract Requirementsunmatched
  • Control Objectives for Information and related Technology (COBIT)unmatched
  • Documentationunmatched
  • Establish Prioritiesunmatched
  • External Auditunmatched
  • Financial Servicesunmatched
  • Government Organizationsunmatched
  • Industry Standardsunmatched
  • Information Technology & Information Systemsunmatched
  • Information/Data Security (InfoSec)unmatched
  • Insuranceunmatched
  • Internal Auditunmatched
  • Internet Securityunmatched
  • Interpersonal Skillsunmatched
  • Leadershipunmatched
  • Legalunmatched
  • Maintain Complianceunmatched
  • Mentoringunmatched
  • Metricsunmatched
  • Multitaskingunmatched
  • Operational Strategyunmatched
  • Organizational Development/Managementunmatched
  • Performance Metricsunmatched
  • Presentation/Verbal Skillsunmatched
  • Privacy Regulationsunmatched
  • Process Developmentunmatched
  • Regulationsunmatched
  • Regulatory Complianceunmatched
  • Regulatory Requirementsunmatched
  • Reporting Dashboardsunmatched
  • Riskunmatched
  • Risk Analysisunmatched
  • Risk Managementunmatched
  • Risk Management Framework (RMF)unmatched
  • Security Analysisunmatched
  • Security Auditingunmatched
  • Security Complianceunmatched
  • Security Monitoringunmatched
  • Strategic Planningunmatched
  • Team Buildingunmatched
  • Time Managementunmatched
  • Trend Analysisunmatched
  • U.S. National Institute of Standards and Technology (NIST)unmatched

Be found by employers

5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Free resume builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Free resume builder