Field Chief Information Security Officer

About Us

Since 1989, SHI International Corp. has helped organizations change the world through technology. We’ve grown every year since, and today we’re proud to be a $16 billion global provider of IT solutions and services. Over 17,000 Organizations Worldwide Rely On SHI’s Concierge Approach To Help Them Solve What’s Next. But The Heartbeat Of SHI Is Our Employees – All 7,000 Of Them. If You Join Our Team, You’ll Enjoy:

• Our commitment to diversity, as the largest minority- and woman-owned enterprise in the U.S.
• Continuous professional growth and leadership opportunities.
• Health, wellness, and financial benefits to offer peace of mind to you and your family.
• World-class facilities and the technology you need to thrive – in our offices or yours.

Job Summary

The Chief Information Security Officer will develop and implement a comprehensive information security strategy that aligns with the organization's goals, ensuring the protection of information assets through effective policy enforcement and risk management. This role involves managing incident response, ensuring regulatory compliance, and overseeing security audits and technology investments to enhance the organization's security posture. The CISO will collaborate with various departments, conduct security awareness training, and provide regular updates to senior management and the board on security status, risks, and initiatives.

Role Description

• Develop and implement an information security strategy that aligns with the organization's goals and objectives to ensure comprehensive protection of information assets.
• Oversee the development and enforcement of security policies to ensure that all security policies, procedures, and protocols are up-to-date and effectively implemented across the organization.
• Lead risk management efforts by identifying, assessing, and mitigating information security risks to protect the organization from potential threats and vulnerabilities.
• Manage incident response and recovery by developing and overseeing the execution of incident response plans to address security breaches and ensure timely recovery.
• Ensure compliance with regulatory requirements by monitoring and enforcing compliance with relevant laws, regulations, and industry standards related to information security.
• Collaborate with other departments such as IT, legal, HR, and others to integrate security measures into all aspects of the organization's operations.
• Conduct security awareness training to educate employees on security best practices and promote a culture of security awareness throughout the organization.
• Oversee security audits and assessments by regularly conducting internal and external audits to evaluate the effectiveness of security measures and identify areas for improvement.
• Manage security technology investments by evaluating, selecting, and implementing security technologies and tools to enhance the organization's security posture.
• Report to senior management and the board of directors by providing regular updates on the organization's security status, risks, and initiatives to ensure informed decision-making at the highest levels.

Key Skills/Competency

• Information Security Strategy
• Policy Development and Enforcement
• Risk Management
• Incident Response
• Regulatory Compliance
• Security Audits
• Security Technology Investment
• Cross-departmental Collaboration
• Security Awareness Training
• Board and Senior Management Reporting