Field Chief Information Security Officer

Chief Information Security Officer

Since 1989, SHI International Corp. has helped organizations change the world through technology. We've grown every year since, and today we're proud to be a $16 billion global provider of IT solutions and services. Over 17,000 organizations worldwide rely on SHI's concierge approach to help them solve what's next. But the heartbeat of SHI is our employees all 7,000 of them. If you join our team, you'll enjoy:

• Our commitment to diversity, as the largest minority- and woman-owned enterprise in the U.S.
• Continuous professional growth and leadership opportunities.
• Health, wellness, and financial benefits to offer peace of mind to you and your family.
• World-class facilities and the technology you need to thrive in our offices or yours.

Job Summary

The Chief Information Security Officer will develop and implement a comprehensive information security strategy that aligns with the organization's goals, ensuring the protection of information assets through effective policy enforcement and risk management. This role involves managing incident response, ensuring regulatory compliance, and overseeing security audits and technology investments to enhance the organization's security posture. The CISO will collaborate with various departments, conduct security awareness training, and provide regular updates to senior management and the board on security status, risks, and initiatives.

Role Description

Develop and implement an information security strategy that aligns with the organization's goals and objectives to ensure comprehensive protection of information assets.

Oversee the development and enforcement of security policies to ensure that all security policies, procedures, and protocols are up-to-date and effectively implemented across the organization.

Lead risk management efforts by identifying, assessing, and mitigating information security risks to protect the organization from potential threats and vulnerabilities.

Manage incident response and recovery by developing and overseeing the execution of incident response plans to address security breaches and ensure timely recovery.

Ensure compliance with regulatory requirements by monitoring and enforcing compliance with relevant laws, regulations, and industry standards related to information security.

Collaborate with other departments such as IT, legal, HR, and others to integrate security measures into all aspects of the organization's operations.

Conduct security awareness training to educate employees on security best practices and promote a culture of security awareness throughout the organization.

Oversee security audits and assessments by regularly conducting internal and external audits to evaluate the effectiveness of security measures and identify areas for improvement.

Manage security technology investments by evaluating, selecting, and implementing security technologies and tools to enhance the organization's security posture.

Report to senior management and the board of directors by providing regular updates on the organization's security status, risks, and initiatives to ensure informed decision-making at the highest levels.

Behaviors and Competencies

Technical Expertise: Can create new applications for technical knowledge and skills and can lead the development of technical standards and procedures.

Strategic Thinking: Can analyze complex situations, drive organizational transformation, and adapt strategies to changing market conditions.

Risk-Taking: Can inspire and encourage others to take calculated risks, fostering a culture of innovation and adaptability.

Decision-Making: Can lead organizational decision-making, mentor others in developing decision-making skills, and create frameworks that enhance the decision-making capabilities of the team.

Leadership: Can lead strategic team initiatives, inspire others to take leadership roles, and foster a culture of shared responsibility and continuous improvement.

Analytical Thinking: Can lead and innovate in the application of analytical thinking, solve complex problems, influence others, and contribute to best practices.

Communication: Can lead and model exceptional communication at all levels of the organization, develop and implement communication strategies, and coach others to improve their communication skills.

Adaptability: Can drive strategic transformations, inspire others to embrace change, and foster a culture of continuous adaptation.

Collaboration: Can lead complex team projects, inspire others to collaborate effectively, and foster a culture of mutual respect and shared purpose.

Ethics: Can lead strategic initiatives, inspire others to uphold ethical standards, and foster a culture of integrity and ethical conduct.

Skill Level Requirements

Deep understanding of the security industry, best practices, emerging technologies, and leading solutions - Expert

Experience supporting various compliance and regulatory frameworks - Expert

Change Management, ability to manage, drive, and adapt to organizational change while maintaining team morale and productivity. - Expert

Continuous Improvement, identifying areas for improvement, implementing changes, and measuring results to enhance processes and performance. - Expert

Financial Awareness and understanding of financial concepts, budgeting, with the ability to make informed decisions based on financial data. - Expert

Forward Thinking, anticipating future trends and needs, and making decisions that position oneself or one's organization for success. - Expert

Innovation to generate, develop, and implement new and original ideas, challenging the status quo to improve processes and solutions. - Expert

Resilient, has the ability to recover quickly from difficulties and adapt in the face of challenging circumstances. - Expert

Influence, ability to persuade, lead, and influence others to achieve desired outcomes. - Expert

Willing to Learn, open to new ideas, and has a desire to continuously learn to stay current with the latest trends, threats, and technology. - Expert

Documentation involves creating, maintaining, and managing detailed and accurate records and documentation to support organizational processes and decisions. - Expert

Other Requirements

Completed Bachelor's degree in computer science, information technology, cybersecurity, or a related field. Master's degree preferred.

10+ years' experience in an enterprise information security role

10+ years' experience in a leadership role

Advanced Certifications: CISSP, CRISC, GCEIT, CISM, GIAC

The estimated annual pay range for this position is $275,000 - $350,000 which includes a base salary and bonus. The compensation for this position is dependent on job-related knowledge, skills, experience, and market location and, therefore, will vary from individual to individual. Benefits may include, but are not limited to, medical, vision, dental, 401K, and flexible spending. Equal Employment Opportunity M/F/Disability/Protected Veteran Status