Corporate Business Information Security Officer

Job Description

Company: Allegis Group

Location: Hanover, US

Overview

Job Summary:
The role is to provide vision and leadership for developing and supporting information security initiatives in a shared services corporate model, while overseeing various teams of individuals within the company operating companies (OpCos). This role will assist others operating in a federated manner to meet their company’s information security mission as well as ensure that their company security strategies are aligned with that of Allegis Corporate Services (ACS) and Allegis Group as a whole. The Corporate BISO, in conjunction with the Chief Information Security Officer (CISO) of ACS, will oversee and direct the planning and implementation of global enterprise information security systems, business operation and facility defenses against information security breaches and vulnerability issues.
This individual is also responsible for assisting other team members with evaluating, auditing and making recommendations regarding existing systems, while directing the administration and education of information security policies, activities and standards.

Responsibilities

Essential Functions:
Strategy & Planning

• Evaluate current state of information security for Allegis Group domestically and globally to include other federated environments and provide a regular executive summary for leadership as well as make recommendations for future state to elevate status, if necessary, to a best practices state.

• Participate as a member of the senior leadership team in governance processes of the organization’s information security strategies.

• In concert with company affiliates define and communicate corporate plans, procedures, policies and standards for the organization for acquiring, implementing and operating new information security systems, equipment, software and other technologies. Recommend and implement changes in information security policies and practices in accordance with changes in local, federal or international regulation.

• In concert with company affiliates lead strategic security planning to achieve business goals by prioritizing defense initiatives and coordinating the evaluation, deployment and management of current and future security technologies.

• Develop and communicate security strategies and plans to executive team, staff, partners, customers and stakeholders.

• Assist with the design and implementation of disaster recovery and business continuity plans, procedures, audits and enhancements.

• Develop, implement, maintain and oversee enforcement of policies, procedures and associated plans for system security administration and user system access based on industry-standard best practices.

• Assess and communicate information security risks associated with acquisitions performed by Allegis Group.

• Remain informed on trends and issues in the information security industry, including current and emerging technologies. Advise, counsel and educate executive and leadership teams on their relative importance and financial impact.

• Assist OpCo BISOs and Information Security Analysts (ISAs) with decisions related to low-risk variances to information security standard baselines. Authority to recommend decisions on all moderate and high-risk variations to the CISO.

• Review all training related materials regarding information security to evaluate in terms of best practices for both internal and contract employees.

Operational Management

• Act as advocate and primary liaison for Allegis Group’s information security vision via regular written and in-person communications with executives, leadership and end users.

• Work closely with ACS IS on corporate technology development to fully secure information, computer, network and processing systems.

• Work closely with other BISOs and ISAs to foster security using the Confidentiality, Integrity, and Availability (CIA) triad guide policies for information security within the organization.

• Be cognizant of the administration of all information security systems and their corresponding or associated software such as perimeter devices including firewalls and intrusion detection systems as well as end-point solutions including encryption, anti-virus and data loss prevention (DLP).

• Work with ACS Real Estate to understand the administration of the facility’s security systems and their corresponding equipment or software.

• Develop, track and control any associated Allegis Group information security services spend (annual operating and capital budgets) for purchasing, staffing and operations.

• Review, educate and enforce information security policies.

• Coordinate associated activities with Consultant/Contractor end of assignment/de-provisioning project solutions.

• Coordinate efforts regarding franc

Source: BeBee