As our first security hire, you will be responsible for designing and implementing our information and cyber security program. You will work directly with the CTO and other senior leaders in the organization to develop appropriate security policies, processes, and controls. You will work with other Engineering leaders to bring the organization into compliance and to validate the results through external audit and testing. Our medium-term goal is external certification. We are looking for someone who has previously owned the development of a security program for a software business. The right person for this role will be a creative problem solver who will be a pragmatic yet persistent force driving security awareness and improvement within Wiser.

 

Essential Functions:

Provider overall security direction and thought leadership for the company
Define and manage our information security operations, policies and governance
Conduct regular assessments to identify risks, vulnerabilities and threats to our systems, develop the controls to mitigate and drive the remediation
Define and lead the program to bring us into compliance with industry best practices
Facilitate external audit and testing required to achieve external certification
Develop and maintain a security awareness and training program
Work with prospects and customers to address their security questions and build confidence that we will keep their sensitive data secure within our environment
Conduct security reviews of technical designs and implementations for new Engineering initiatives
Ensure best practices are incorporated into all Wiser systems and infrastructure
Develop and implement incident response plans in the event of a security breach or attack
Lead the identification, response, and remediation of potential security breaches or attacks
Stay up-to-date on emerging threats, trends and technologies and recommend appropriate solutions
Identify, measure and report monthly on security KPIs

Qualifications

Bachelor’s degree in Computer Science or Information Technology; or relevant work experience
10+ years of information security experience with focus on small/mid-size SaaS/software businesses
5+ years in a security leadership role
One or more professional certifications such as CISSP, CISM, or CISA
Strong knowledge of common frameworks such as ISO 27001/27002, NIST and SOC II
Strong understanding of regulations, compliance and laws related to data privacy and security
Understanding of security concepts for both cloud-based and on premise architectures
Prior experience designing and implementing a security program
Knowledge of security technologies such as intrusion detection and prevention systems, firewalls, security information and event management (SIEM) systems, security analytics tools, network security tools, and endpoint security systems
Technical understanding of (and controls for) networking, Linux/Windows servers, virtual machines, containers, databases, microservices, web and mobile applications
Proven ability to learn quickly, make pragmatic decisions, and adapt to changing business needs
Excellent communication skills with the ability to explain complex topics to non-technical audiences

Additional Information

This position may require being on call rotation to address critical production application issues outside of normal working hours.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

EEO STATEMENT - Wiser Solutions, Inc. is an Equal Opportunity Employer and prohibits Discrimination, Harassment, and Retaliation of any kind. Wiser Solutions, Inc. is committed to the principle of equal employment opportunity for all employees and applicants, providing a work environment free of discrimination, harassment, and retaliation. All employment decisions at Wiser Solutions, Inc. are based on business needs, job requirements, and individual qualifications, without regard to race, color, religion, sex, national origin, family or parental status, disability, genetics, age, sexual orientation, veteran status, or any other status protected by the state, federal, or local law. Wiser Solutions, Inc. will not tolerate discrimination, harassment, or retaliation based on any of these characteristics.

Wiser Solutions, Inc.

New Jobs

Director of Cybersecurity