Information Security Officer

Information Security Officer
Pay: $85,000 – $100,000 per year
Location: Near Niskayuna, NY
Employment Type: Full-Time, Salaried
 
The Opportunity
Our client, an established organization with a close-knit community of users, is hiring a security leader to guide how it protects its people, data, and technology. Reporting to the head of IT, you will set the direction for the security program, turn policy into everyday practice, and help colleagues across the organization see security as something they share ownership of. This is a visible, hands-on role for someone who enjoys being both a strategist and a trusted advisor.
 
What You'll Do
Lead the Security Program

• Build, run, and refine the organization's security program, including policies, standards, risk management, and incident response
• Create and maintain a forward-looking security roadmap for systems, networks, and data
• Contribute to IT leadership planning and set security goals alongside the wider technology team

Find and Reduce Risk

• Run and review vulnerability assessments and coordinate periodic organization-wide security evaluations
• Manage security tool settings and configurations
• Review and audit firewall rules managed by an outside network partner, and work with that partner to examine logs and events for unusual activity
• Help evaluate the security posture of new vendors and products

Respond and Educate

• Direct the response to security incidents, suspected policy violations, and outside complaints or inquiries, from first report through resolution
• Deliver security awareness training and communicate practices clearly to staff at every level
• Work with IT colleagues to track and complete security initiatives

What You Bring

• Bachelor's degree, or an equivalent mix of education, training, certifications, and experience
• At least 5 years in information security or a closely related field
• Skill at explaining complex security topics to audiences ranging from everyday users to senior executives
• Familiarity with data protection and breach regulations and frameworks such as PCI, HIPAA, and the NIST 800 series
• Practical experience with networking, VPN, next-generation firewalls, network access control, SIEM, authentication, and encryption
• CISSP, GIAC, or a comparable certification is preferred
• Strong communication and relationship-building skills, with careful attention to documentation
• A positive, collaborative style, good prioritization, and comfort working both independently and as part of a team in a fast-moving environment

 
To see a full listing of all our open positions, please visit:
https://www.redshiftrecruiting.com/jobs-hiring-near-me
 
redShift Recruiting is the region's premier recruiting agency with over 100 years of combined experience in the recruiting field. We specialize in permanent, temporary, and temp-to-hire positions. Our superior service combined with our highly qualified and carefully selected bank of candidates sets us apart.