The Company

At apexanalytix, we’re lifelong innovators! Since the date of our founding nearly four decades ago we’ve been consistently growing, profitable, and delivering the best procure-to-pay solutions to the world.We’re the perfect balance of established company and start-up. You will find a unique home here.

And you’ll recognize the names of our clients. Most of them are on The Global 2000. They trust us to give them the latest in controls, audit and analytics software every day. Industry analysts consistently rank us as a top supplier management solution, and you’ll be helping build that reputation.

Read more about apexanalytix - https://www.apexanalytix.com/about/

Quick Take -

The Lead of Information Security is responsible for establishing and maintaining a company-wide information security and risk management program to ensure that information assets of APEX and our clients are adequately protected.

The Work -

The Lead is responsible for identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the company. The Lead’s position requires a leader with solid skills in business management and a working knowledge of information security best practices. You will actively work with the APEX functional departments to implement practices that meet defined policies and standards for information security.

Primary Tasks/Activities:

Develop, implement, and monitor a strategic, comprehensive company-wide information security and IT risk management program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the company.
Facilitate information security governance through implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.
Develop, publish and maintain up-to-date security policies, standards and guidelines; and oversee training and dissemination of security policies and practices.
Craft, implement and communicate a process for vendor risk management.
Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users.
Build a framework for roles and responsibilities with regards to information ownership, classification, accountability, and protection.
Develop and enhance an information security management framework based on one of the currently accepted standards such as ISO 27001.
Complete client or prospect security questionnaires, security sections of RFPs and support client and 3rd party information security audits.
Ensure that security programs are compliant relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
Work with the APEX Executive team to respond to and address risks and audit findings; define and facilitate the information security risk assessment process, including the reporting and oversight of treatment efforts to address negative findings.
Perform related duties and fulfill responsibilities as assigned.

The Must-Haves -

Knowledge of common information security management frameworks, such as ISO 27001, COBIT,CIS, GDPR and NIST.
Significant knowledge of information security technologies, networking and network architecture required.
A global perspective on privacy, security, and data protection issues and trends.
Knowledge and understanding of relevant legal and regulatory requirements including, but not limited to SOX and HIPAA.
Significant knowledge of cyber threat actors and their attack methodologies are required.
Minimum of eight (8) years of experience in a combination of information security, risk management, and IT positions.

apexanalytix

New Jobs

Lead, Information Security