Director, Information Security and Technology

📋 Description

• • As the Director of Information Security and IT Operations at Revalize, you will be at the forefront of safeguarding our organization's digital assets and ensuring the unwavering reliability, scalability, and efficiency of our critical IT infrastructure. This pivotal role demands a strategic leader who can seamlessly blend the oversight of comprehensive enterprise-wide information security programs with the meticulous management of core IT operations. Your purview will encompass networks, servers, cloud environments, and end-user devices, forming the backbone of our global SaaS business model.
• • You will be instrumental in designing and implementing robust security frameworks, proactive risk management strategies, and stringent compliance initiatives. Simultaneously, you will drive the modernization of our IT systems, ensuring they are not only secure but also capable of supporting our dynamic and evolving business needs. A key focus will be embedding security principles deeply into our software development lifecycle, from initial design to ongoing maintenance, fostering a culture of 'secure-by-design' across all engineering efforts.
• • Your responsibilities will extend to managing and orchestrating our incident response capabilities, ensuring swift and effective mitigation of any security breaches. Furthermore, you will be responsible for maintaining and enhancing our business continuity plans, guaranteeing operational resilience in the face of unforeseen events. This includes optimizing IT service delivery to ensure our internal teams and external customers experience seamless access and support.
• • The role requires a deep understanding of network performance optimization and efficient device lifecycle management, from procurement and deployment to retirement. You will collaborate closely with our engineering, product, and broader business teams, ensuring that all technology initiatives are strategically aligned with the overarching organizational goals and objectives. This cross-functional collaboration is essential for driving innovation while maintaining a strong security posture.
• • A significant aspect of your leadership will involve championing the secure and responsible adoption of Artificial Intelligence (AI) and other emerging technologies. You will be tasked with balancing the exciting potential of these advancements with the critical need for rigorous risk mitigation, ensuring Revalize remains at the cutting edge while upholding the highest standards of security and ethical practice.
• • Success in this demanding position requires a unique blend of visionary leadership, profound technical expertise, and the exceptional ability to influence and inspire stakeholders at all levels of the organization. Your efforts will be crucial in achieving operational excellence and establishing a world-class security posture that protects Revalize, its customers, and its stakeholders from operational, financial, and reputational harm.
• • Key Responsibilities include:
• • Developing and executing Revalize's comprehensive information security strategy, ensuring its tight alignment with business objectives and the organization's defined risk appetite.
• • Implementing and maintaining effective security governance processes, clear policies, and stringent standards across the entire organization, ensuring adherence to all applicable regulations and industry frameworks.
• • Overseeing the day-to-day security operations, including continuous monitoring, rapid incident response, and proactive vulnerability management, with the goal of minimizing risk and operational impact.
• • Partnering strategically with IT, Engineering, and Product teams to deeply embed security principles throughout the software development lifecycle, encompassing secure design, rigorous testing, and efficient vulnerability remediation.
• • Assisting in the definition and continuous improvement of cloud and SaaS security practices, with a particular focus on identity and access management, data encryption, and robust monitoring solutions.
• • Managing the assessment of security risks associated with third-party vendors and partners, ensuring that appropriate security controls are established and maintained.
• • Driving impactful security awareness and training programs designed to cultivate a strong, organization-wide culture of security consciousness and best practices.
• • Providing regular, clear, and concise reporting on the organization's security posture, significant incidents, and key risk metrics to senior leadership.
• • Managing the global technology device onboarding, refresh, and return processes, accurately determining hardware needs for our employee base, and ensuring all assets are meticulously tracked and maintained.
• • Ensuring the stability and optimal functioning of internal IT networks, proactively addressing any office-related technology issues, keeping technology current, and making informed recommendations for upgrades as technology and business needs evolve.
• • Leading the global IT Support function to guarantee that hardware and software problems are addressed in a timely, comprehensive, and satisfactory manner, maintaining agreed-upon service level agreements for response and resolution timeframes.