Head of Cyber Security

Job Description

- Develop, manage and set the vision for the Information Security Program

- Design the strategy and architecture for security programs that include: Audit and Compliance functions, Risk Governance, Security Policies and Procedures, Security Awareness Training, Security Information and Event Management, Incident Response Management and Business Continuity Processes

- Develop an end-to-end understanding of all Calendly systems, tools and processes to identify areas of risk and exposure and a roadmap to remedy them

- Ensure security architecture deliverables reflect and support business, technical, operational, and compliance objectives

- Build out the Security function at Calendly to keep pace with the growth acceleration and industry demands

- Develop and maintain detailed Security Architecture Plans and Designs

- Review Threat and Vulnerability reports and create detailed Action Plans to address risks

- Maintain awareness of IT/ Security industry trends, evaluate new solutions and techniques, as remain aware of emerging threats

- Create Security Standards for Hardened Server, Workstations, and Network Components

- Promote awareness of Information Security Best Practices and adequate representation across lines of business

- Prioritize and delegate Risk Assessment activities and ensure completion

- Oversee newly implemented technologies and coordinate internal/external audits

- Ensure compliance of the Information Security and Risk Management programs with all Regulatory, Contractual, Association, and Client requirements

- Lead compliance efforts consisting of HIPAA, HITRUST, GLBA, SSAE 18 SOC 1 and 2 reporting, client audit response (For IT, Security, and related items), PCI, and other compliance requirements

Requirements

- Bachelor's degree in related field at a minimum and a master’s degree in related field highly desirable

- 10+ years of Progressive Experience in Managing Security Department Staffing, Budgets and Invoicing, Contractors, Vendors, and Corporate Security Programs and Projects

- CISSP, CISM, or other equivalent security certification required

- CRISC, CISA, CISM preferred

- ITIL Certification preferred

- Hands-on Technical Experience with Telecommunications and Network, Security Solutions (Firewalls, IDS/ IPS, SIEM, Vulnerability Assessment Tools) Access Control Systems, Cryptography, Physical Security Systems, and Secure SDLC Methodologies