Responsibilities:

• Architect, design, implement, deliver and support security roadmaps/strategies and IT Security Program.
• Establish security processes and controls and support periodic risk assessments to identify current and future internal and external security vulnerabilities applicable to Samuel.
• Responsible for establishing and delivering meaningful and actionable security metrics and reporting.
• Contribute to and budget towards efficient application of security funds most effectively.
• Lead, mentor and grow security team skills and abilities.
• Work with other departments and vendors to oversee data security requirements are incorporated into the roll out of new systems.
• Provide Subject Matter Expertise to all areas of the business including for mergers and acquisition activities.
• Ensures adequate and effective security processes exist to meet current and future security compliance requirements found in local, state, and federal laws and regulations.
• Identify/recommend tools, processes, software, and hardware to improve or replace current security infrastructure practices, services, or technologies to meet future requirements.
• Ensures tests of information security measures, including targeted penetration tests and other configurable and administrative controls reviews.
• Manages ad-hoc and emergency projects related to information security.
• Mentor, coach and support career development of direct report(s).
  Other responsibilities as assigned.

Education & Certifications:

• Bachelor’s degree in Computer Science, IT, or relevant field.
• Certifications (gained or in progress): CISSP, GIAC, CISM.

Qualifications:

• 7-10 years of progressive IT infrastructure and security experience.
• Experience architecting, delivering, and continuously improving security posture including IDS/IPS, SEIM, Data Integrity, Network, Cloud, PAM, Email Security.
• Strong problem solving, planning and leadership skills.
• Strong ability to communicate with and understand both business and IT leaders to build and manage relationships.
• The drive to deliver results.
• Ability to respond quickly and effectively to changing business environment, requirements or shifts in technologies and/or skills.
• Be of good moral character, consistent with the CCMC Code of Professional Conduct.
• Familiar with NIST 800-171 requirements.