Cyber Security Jobs in Indianapolis (Finish Line) – Director

Website Finish Line

Job Description:

As a key member of Finish Line’s IT Management Team, the Director of Cyber Security is responsible for developing, executing and administering the Finish Line IT security strategy and program plan. The scope of the program is company-wide with the purpose of protecting the company’s information and infrastructure from external or internal threats; assuring the company complies with statutory and regulatory requirements regarding information access, security and privacy. The Information Security Director will initiate, implement and develop information security and remove programs in accordance with organizational information security standards, as well as, promote security awareness throughout the organization. Serving as a key partner to the business this position collaborates with department leaders to define how IT can align, support and enable the business. This leader will effectively exhibit JD Finish Line’s core values of Customer, People, Winning, Community, and Financial Responsibility in everything they do by performing the following main duties:

<

Job Responsibilities:

  • Leadership and strategic direction for the function, ranging from planning and budgeting to motivational and promotional activities expounding the value of information security.
  • Manage the development and deployment of information security policies, standards and procedures.
  • Leads the design and operation of related compliance monitoring and improvement activities to ensure compliance with internal security policies and applicable laws and regulations.
  • Liaison with and offer strategic direction to business partners on information security matters such as routing security activities plus emerging security risks and control technologies.
  • Develop and implement incident reporting and response activities related to security breaches, policy violations and external complaints.
  • Ensure secure practices when we engage 3rd party/external vendors.
  • Provide leadership insights as a contributing team member of the IT leadership team in defining and deploying policies and procedures. This leadership role will require maintaining current knowledge of security trends and threats and translating this into meaningful changes in the company’s systems and procedures.
  • Ability to manage budgets, maintain forecasts, develop and present business cases.
  • Liaison with legal/compliance partners. As well as our business units to ensure secure operational and solutioning practices related to new or existing initiatives.
  • Extensive knowledge of: NIST, CIS Top 10, PCI-DSS, ISMS, ISO27001, SOC 1, and SOC 2.
  • Develops and enhances cyber security management along with control frameworks based on industry standards to measure efficiency/effectiveness of the program, facilities, and appropriate resource allocation while increasing the maturity of security.
  • Deep knowledge of cyber security technologies, compliance and regulatory matters, information governance and privacy best practices.

Job Requirements:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

  • Required Education and/or Experience: Bachelor’s degree (B.A.) from a four-year college or university and at least 8 – 10+ years of applicable experience in IT technical roles such as; information security, IT architecture, development or operations, with a clear and abiding interest in information security; or an equivalent combination of education and experience. Must possess at least 7 years working experience in the
  • Information Security function. Information security management qualifications such as CISSP or CISM required. Detailed knowledge of cloud based controls – SOC 1 controls, preventive controls, corrective controls and risk mitigation are required.
  • Technical Skills: Should have intermediate knowledge and abilities with Microsoft Word, Excel, PowerPoint and Access as well as a working understanding of functions and relationships of information in PeopleSoft/Oracle system or other key retail applications. High-level knowledge of networks, data center, desktop management and data interchange are required.
  • Communication Skills: Ability to read and understand documents such as operating instructions, government forms, procedural manuals.
  • Ability to write routine reports and business correspondence. Ability to effectively present information and effectively respond to questions via telephone, email, written communications, and in person.

Job Details:

Company: Finish Line

Vacancy Type:  Full Time

Job Location: Indianapolis, IN, US

Application Deadline: N/A

<

Apply Here

jobstrivia.xyz