Lead of Information Security Operations

Created on 10-04-2018

Location Palo Alto, CA, US

CLOSED VACANCY Apply now

Save for later

Description

About Houzz

Join Houzz in revolutionizing the home and remodeling industry and have an impact on over 40 million homeowners and 2 million professionals around the world. Frequently ranked as one of the top 10 most disruptive companies in the world and backed by marquee venture capitalists, Houzz will allow you to drive the future of an industry worth $1.2 trillion in the US and Europe alone.

Our entrepreneurial culture and warm family atmosphere will surround you with a fun and dynamic work environment you will only find at Houzz.

Our engineers play a direct role in the direction of our company and are able to work across multiple groups to implement fresh ideas that allow Houzz to be the industry leader. If you are interested in applying your passion to create products that will transform the lives of millions of users remodeling and decorating their homes, then welcome to Houzz.

Position Overview

The Lead of Information Security Operations is responsible for protecting the confidentiality and integrity of customer, employee, and business information in compliance with organization policies and standards.

Responsibility includes:

incident response, scanning, monitoring, penetration testing, forensics and investigations, threat intelligence, technology evaluation, security reviews, security tools/systems administration, reporting and standards/procedures development. Essential functions will include the following:

Contributions

Develop, implement and monitor a strategic, comprehensive enterprise security operations program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the organization.

Oversee implementation of security infrastructure, and software tools used to support those strategies for bank projects.

Coordinate information security projects with staff from the IT organization and product teams.

Provide security guidance for IT projects, including technical risk evaluation and recommendation of controls.

Work with the executive team to prioritize security initiatives and spending based on appropriate risk management and/or financial methodology.

Establish governance structures to fully embed security process and procedure into all decision making processes for technology projects.

Ability to build strong relationships throughout the organization as well as with executive management

Promote security awareness throughout the organization at all levels

Provide appropriate reporting and communications to senior leadership

Required Skills & Experience

BS/BA in computer science, information systems, business, or equivalent experience

Demonstrated success in managing at a senior level in Security and/or Risk Management organizations.

Demonstrated success in Information Security field including experience in architecting, designing and/or administering secure IT solutions (4-5 years).

Understanding of LAN/WAN architecture, design, and network topologies

Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences

Knowledge of technology trends and developments in the area of information security and risk management

Must be able to multitask and be detailed oriented.

Must be able to maintain organizational security and confidentiality

Must understand security issues related to e-business initiatives

Industry recognized professional Security certification a plus (CISSP, CIPP/IT, CRISC)