Trabajos Remotos

As part of our team, your main responsibilities will be:

1. Assist the CISO in the development, implementation, and monitoring of enterprise information security program. Ensure policies and SOPs are written, approved, published, and kept up to date.

2. Serve as program lead for enterprise Information Security certification programs:

• ISO 27001
• SSAE-18 SOC2
• HIPAA/HITRUST
• Etc.

3. Serve as program lead for the following programs:

• Enterprise Information Security Awareness program:

1. 1. Develop Biannual Global Information Security Awareness Trainings.
   2. Administer Biannual Phishing Simulation Campaigns.
   3. Develop and deliver role/function-specific security awareness training, as needed.

• Enterprise Business Continuity Program:

1. 1. Create, update, and disseminate Enterprise Business Continuity Program Governance materials.
   2. Work with internal departments on the creation and testing of Departmental Business Continuity Plans
   3. Develop and execute necessary internal and external Business Continuity Alerting and Coordination activities.

• Information Security Vendor Management Program:
  1. Implement and maintain Vendor Management Tracking
  2. Coordinate with the internal Procurement team on new vendor assessments, which include:
     1. Implementing, maintaining, and executing online vendor assessment questionnaires when needed.
     2. Obtaining and reviewing relevant vendor security attestations and other relevant information security materials
     3. Creating and disseminating the necessary assessment summary documentation.
  3. Ensure vendor periodic reassessments occurred within pre-defined timeframe

4. Serve as main POC for organization on Information Security assurance business-as-usual and customer audit activities. This includes, but is not limited to the following:

• Completion of vendor/RFI(P) information security assessments.
• Developing applicable Memos-To-File (MTFs) for sign-off by the Chief Information Security Officer
• Representing Information Security in customer audits (both on-site and remote)

We’d be thrilled to hear that you also have:

1. Experience in administering the following programs:
   • Enterprise Business Continuity Program
   • Information Security Vendor Assessment Program
2. Experience with the development and administration of Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs).
3. Prior participation in Customer Audits
4. Information Security or IT Risk Management/Audit certification
5. Ability to lead and motivate cross-functional, interdisciplinary teams.