Information Security Manager
Salary undisclosed
Checking job availability...
Original
Simplified
Will support VF’s Global Cyber Security Team by ensuring that information security risks associated with complex business operations are within acceptable tolerances.
You will perform information security risk assessments, provide direction and guidance to stakeholders concerning the handling of security risks associated with assessment findings, assist with the design of appropriate risk mitigation strategies, and serve as an audit quality assurance gate for internal and external auditors while driving compliance and audit work related to data privacy.
How You Will Make a Difference
You will achieve this by:
- Collaborating with information technology and other business units to identify cybersecurity risks associated with current and planned projects.
- Performing assessments of external party information security controls to ensure they meet or exceed VF’s information security risk management requirements for the services to be provided.
- Determining information security risk profiles for various vendor and business partner services using questionnaires, relevant industry best practices and standards, and knowledge of VF policies.
- Recommending solutions to eliminate, reduce, or mitigate cybersecurity risk, and communicate said solutions to external parties and/or internal business stakeholders as appropriate.
- Providing direction and guidance as needed to internal project stakeholders concerning statutory, regulatory, and VF policy requirements.
- Reporting status of engagements to Global Cyber Security management, project managers, and other business stakeholders as appropriate.
- Assisting in enforcing information security policies, standards, and procedures. Review requests for exceptions to security policies and provide recommendations to management.
- Serving as a focal point for MLPS and provide advisory around MLPS and other APAC data privacy laws related controls and processes.
- Acting as focal point for Regional PCI-DSS assessments, vulnerability assessments and other security operations.
- Researching and advocate new technologies, architectures, and products that will support security requirements for the enterprise and its customers, business partners, and vendors.
- Performing other information security risk management tasks as assigned.
Skills for Success
- A formal education and subsequent University Bachelor or Master’s degree in information systems, computer science, or related field are preferred, but we are most interested in your total experience and professional achievements. That’s why:
- 5+ years of information security risk management, IT audit, and/or IT controls design and implementation experience.
- Possess a Certified Information Systems Security Professional (CISSP) certification, Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or similar credentials.
- Familiar with industry best practises related to security and data privacy in Cloud environments.
- Have functional understanding of industry frameworks, regulations, legislation, and audit methodologies, including SOC 1, SOC 2, ISO 27001, SIG, NIST Cybersecurity Framework, Sarbanes-Oxley (SOX), PCI-DSS, MLPS and various other privacy laws.
- You possess the ability to influence others through persuasion to arrive at desired outcomes.
- Able to communicate effectively with a broad range of people and roles, including vendors, information technology professionals, and other business personnel.
- Desire to seize the initiative, operate proactively, and work in a highly independent manner.
Will support VF’s Global Cyber Security Team by ensuring that information security risks associated with complex business operations are within acceptable tolerances.
You will perform information security risk assessments, provide direction and guidance to stakeholders concerning the handling of security risks associated with assessment findings, assist with the design of appropriate risk mitigation strategies, and serve as an audit quality assurance gate for internal and external auditors while driving compliance and audit work related to data privacy.
How You Will Make a Difference
You will achieve this by:
- Collaborating with information technology and other business units to identify cybersecurity risks associated with current and planned projects.
- Performing assessments of external party information security controls to ensure they meet or exceed VF’s information security risk management requirements for the services to be provided.
- Determining information security risk profiles for various vendor and business partner services using questionnaires, relevant industry best practices and standards, and knowledge of VF policies.
- Recommending solutions to eliminate, reduce, or mitigate cybersecurity risk, and communicate said solutions to external parties and/or internal business stakeholders as appropriate.
- Providing direction and guidance as needed to internal project stakeholders concerning statutory, regulatory, and VF policy requirements.
- Reporting status of engagements to Global Cyber Security management, project managers, and other business stakeholders as appropriate.
- Assisting in enforcing information security policies, standards, and procedures. Review requests for exceptions to security policies and provide recommendations to management.
- Serving as a focal point for MLPS and provide advisory around MLPS and other APAC data privacy laws related controls and processes.
- Acting as focal point for Regional PCI-DSS assessments, vulnerability assessments and other security operations.
- Researching and advocate new technologies, architectures, and products that will support security requirements for the enterprise and its customers, business partners, and vendors.
- Performing other information security risk management tasks as assigned.
Skills for Success
- A formal education and subsequent University Bachelor or Master’s degree in information systems, computer science, or related field are preferred, but we are most interested in your total experience and professional achievements. That’s why:
- 5+ years of information security risk management, IT audit, and/or IT controls design and implementation experience.
- Possess a Certified Information Systems Security Professional (CISSP) certification, Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or similar credentials.
- Familiar with industry best practises related to security and data privacy in Cloud environments.
- Have functional understanding of industry frameworks, regulations, legislation, and audit methodologies, including SOC 1, SOC 2, ISO 27001, SIG, NIST Cybersecurity Framework, Sarbanes-Oxley (SOX), PCI-DSS, MLPS and various other privacy laws.
- You possess the ability to influence others through persuasion to arrive at desired outcomes.
- Able to communicate effectively with a broad range of people and roles, including vendors, information technology professionals, and other business personnel.
- Desire to seize the initiative, operate proactively, and work in a highly independent manner.