Job Title: Information Security Lead
Work Location: Dallas, TX or Remote (CST preferred)
Duration: Direct Hire
Education/Experience Required: Bachelor's degree in Information Security, Computer Science, or a related field (Master's degree preferred) or equivalent experience.
Job Description:
The Information Security Lead will be responsible for implementing and maintaining a comprehensive information security program that safeguards our organization's data, systems, and networks. This role requires a strategic thinker with a deep understanding of cybersecurity risks, technologies, and best practices, who can effectively lead a team and collaborate with stakeholders across the organization.
Responsibilities :
- Develop and implement a robust information security strategy aligned with organizational goals and regulatory requirements.
- Establish and maintain security policies, standards, and procedures to ensure the protection of information assets.
- Conduct risk assessments to identify and evaluate security risks to the organization.
- Implement risk mitigation strategies and controls to minimize exposure to security threats.
- Ensure effective monitoring, detection, and response to security incidents.
- Manage and maintain security technologies and tools, such as firewalls, intrusion detection systems, and vulnerability scanners.
- Develop and maintain security incident response plans and procedures.
- Lead the investigation and resolution of security incidents, including data breaches and cyber-attacks.
- Coordinate with internal and external stakeholders during incident response and recovery efforts.
- Ensure compliance with relevant regulations, standards, and frameworks.
- Conduct regular security audits and assessments to evaluate the effectiveness of security controls and identify areas for improvement.
- Conduct regular incident response tabletop exercise to ensure employees are familiar with response expectations and procedures are kept up to date and effective.
- Develop and deliver security awareness training programs for employees.
- Promote a culture of security awareness and best practices throughout the organization.
- Collaborate with other IT leaders to integrate security best practices into the broader IT strategy.
Skills & Qualifications :
- Bachelor's degree in Information Security, Computer Science, or a related field (Master's degree preferred) or equivalent experience.
- Extensive experience (5+ years) in information security, with a proven track record in a leadership role.
- Strong knowledge of cybersecurity frameworks, technologies, and best practices, e.g., NIST, CIS, MITR ATT&CK.
- Experience with risk management, compliance, and incident response.
- Excellent analytical and problem-solving skills.
- Effective communication and interpersonal skills, with the ability to interact with stakeholders at all levels.
- Relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or equivalent are highly desirable.