Director of Cyber Security Operations to lead the technology and response practices in the Insurance industry

Our client is looking for a Director of Cyber Security Operations to lead the technology and response practices in the Insurance industry

Overview:
Leading the cyber security operational technologies and cyber incident response practices. This role will be required to collaborate with executives / business leaders to reduce the impact of disruptions to information assets and business services.

Must Have's:

• 10+ years of experience in an Information Services/Information Technology role, preferably information security
• 3+ years in a leadership role
• Experience with Incident Response functions
• Experince working with an Enterprise level company

Nice to Have's:

• CISSP, CISM, GIAC certifications 
• Experience in the insurance/finance industry
• Understanding of ITIL

Responsibilities: 

• Ensure identification and drive the end-to-end remediation of discovered or potential security vulnerabilities and mature operational security processes and procedures. 
• Manage major incidents by supporting the team with your in-depth knowledge of security concepts, such as threat vectors, cyber attacks and other techniques.
• Lead the development and implementation of processes designed to identify and monitor the movement of sensitive data, protecting it from accidental loss or malicious exfiltration.
• Collaborate with the Chief Information Security Officer (CISO) in order to align information security’s operational capacities to meet the changing needs of our business.
• Support the CISO to develop budget projections and strategic plans based on short & long-term goals and objectives.
• Partner with the CISO and IT and business stakeholders to define metrics and reporting strategies that effectively communicate successes and progress of the security program.
• Follow all risk remediation protocols to ensure issues are mitigated, risks are accounted for, and exceptions are tracked in accordance with frameworks, policies and standards set by the organization.
• Constructively engage business partners regarding cybersecurity issues.