Deputy Chief Information Security Officer

Job Description:

Deputy Chief Information Security OfficerThe Deputy Chief Information Security Officer is responsible for assisting the CISO with managing the companys Information Security, Physical Security, Regulatory Compliance, Audits, and certification programs. This role ensures that security measures are effectively implemented, maintained, and continuously improved to protect the organization's assets, data, and personnel. The ideal candidate will have a strong understanding of IT security practices, regulatory compliance, and physical security protocols.

Key ResponsibilitiesAssist with the development, implementation, and management of the company's Information Security, Compliance, and Physical Security programs.

Assist and respond to client questionnaires, audits, and virtual meetings.

Coordinate and assist with overseeing security operations, including monitoring, incident response, and investigations.

Respond to security incidents, alerts and breaches, including conducting investigations and recommend corrective actions.

Ensure compliance and lead efforts with relevant regulatory and certification requirements (e.g., PCI-DSS, ISO 27001, ISO 9001 and

HITRUST HIPAA, SSAE18 SOC 2

).Conduct regular risk assessments and vulnerability assessments to identify potential security threats.

Assist with the development and maintenance of security training and awareness programs for employees.

Collaborate with IT, HR, Legal, Compliance and other departments to ensure a cohesive approach to security across the organization.

Assist with the management of third-party vendors audits and security service providers, ensuring they meet the companys and its clients security standards.

Assist with maintaining, updating, or developing security policies, procedures, and documentation.

Prepare and present security reports as required to senior management and stakeholders.

Assist, internal teams with physical security controls, auditing and reporting, access control, surveillance, alert or alarm systems as required.

QualificationsBachelor's degree in Information Security, IT, or a related field.5+ years of experience in information security, compliance, or a related field.

Experience with regulatory compliance frameworks (e.g., GDPR, HIPAA, HITRUST).Strong understanding of IT, Information Security & physical security principles and practices.

Familiarity with security standards such as FTC Safeguard rule, ISO 27001, ISO 9001 NIST, or PCI-DSS.Familiarity with various IT control tools such as Firewalls, Routers, Switches, Data Loss Prevents (DLP), Antivirus, File Integrity, Web Filtering, and Windows Active Directory Familiarity with Microsoft Office, Office 365, Teams etc.

Excellent organizational and project management skills.

Strong analytical and problem-solving abilities.

Effective communication skills, both written and verbal.

Ability to work collaboratively with cross-functional teams.

Security certifications such as CISSP, CISM, or CISA are a plus.

The Deputy Chief Information Security Officer plays a critical role in safeguarding the company's assets and ensuring compliance with security standards. This position requires a proactive approach to managing security risks and a strong commitment to maintaining a secure and compliant environment.