VP Information Security- PCC

Be part of the team that drives our company forward, transforming ideas into real-world tools and platforms that support the business and spur innovation.

Remote, TN

CONNECTION

<p><strong>At Connection, our purpose is simple: we connect people with technology. From hardware&mdash;PCs, printers, servers, and more&mdash;to cutting-edge cloud, cybersecurity, and professional IT services, we design, build, and support the IT solutions that thousands of companies, schools, and government agencies rely on every day. We like to think of ourselves as the IT Department for our customers&rsquo; IT Department. Our company started out almost 40 years ago with two employees and a phone line. Today we&rsquo;re a Fortune 1000 IT solutions partner operating in 174 countries around the world&mdash;still driven by that startup mentality and guided by our original purpose.</strong></p> https://www.connection.com/

keywords: position summary,position details,what we do,who we are,why you should join us,compliance,security,leadership,performance,customer service,knowledge,experience,skills,technical,initiative

Full Time

$173,000.00/Yr. - $225,000.00/Yr.

Overview: <strong>What We Do:</strong><br /><br />We calm the confusion of IT by guiding the connection between people and technology. If a customer is looking for a better way to manage their warehouse inventory, equip their workforce, or secure their data, we make it happen. All it takes is finding the right combination of tech hardware, software, cloud solutions, and support services. That&rsquo;s what we do. We&rsquo;re the IT Department&rsquo;s IT Department.<br /> <br /><strong>Who We Are:</strong><br /><br />Our team is made stronger by a multitude of backgrounds, experiences, and perspectives. It&rsquo;s what makes Connection unique&mdash;what drives us to innovate and create technology solutions that stand apart from the crowd. We&rsquo;d love for you to be a part of that fabric, to share your ideas and experiences with a team that thrives on fresh thinking, creativity, and helping others.<br /> <br /><strong>Why You Should Join Us:</strong><br /><br />You&rsquo;ll find supportive teammates and a rewarding career at Connection&mdash;plus great benefits. We take pride in supporting employees with a total rewards package that provides financial, emotional, and physical resources for you and your family. Our compensation, 401k plans, medical insurance, and other benefits are progressive and competitive. We value the importance of our employees&rsquo; emotional well-being. To support employees, we provide free therapy visits, mental health coaching and tools, and meditation resources. You&rsquo;ll also enjoy a generous paid time off package that includes not only vacation and care time, but also Wellness and Volunteer Time Off days.<br /><br /><br />Working independently under general guidance of the Sr VP and CIO, the Vice President of Information Security leads the corporate information security function for Connection with responsibility for overall corporate privacy and information security strategy, security architecture development, and business function oversight. The scope of this role covers all business units, affiliates, and contractors. As the company&rsquo;s senior information security officer, the Vice President has enterprise-level responsibility for all data/information security policies, standards, evaluations, roles, and corporate awareness. The Vice President leads a team of security specialists and works with business leaders, users, technical groups and Internal / External Auditors in the development and implementation of a security strategy designed to meet legal and contractual compliance requirements and provide a high level of security over information assets and data processing while preserving and enhancing facility and system usability.
Responsibilities: <ul> <li>Establishes annual and long-range security and compliance goals, defines security strategies, metrics, reporting mechanisms and program services. <ul> <li>Creates maturity models and a roadmap for continual program improvements.</li> <li>Creates compliance and privacy frameworks to meet requirements.</li> </ul> </li> <li>Ensures the company is in compliance with applicable data privacy rules, regulations, law, and contractual obligations. <ul> <li>Works with Legal Department to define acceptable terms and conditions.</li> <li>Keeps Executive management informed of data privacy obligations.</li> </ul> </li> <li>Ensures the company is in compliance with all applicable Security and Privacy laws and industry regulations as well as overall best practices.</li> <li>Provides responses to customer requirements in Master Service Agreements (MSA&rsquo;s), Sales Agreements, and Statements of Work (SOW&rsquo;s). Meets with customers to overcome hurdles and gain agreement on terms.</li> <li>Provides departmental leadership to security analysts regarding strategic goals, work assignments, and professional development. <ul> <li>Manages staffing requirements in conjunction with HR to include hiring, disciplining, reassigning, and firing as needed.</li> <li>Monitors and documents employee performance to facilitate career development.</li> <li>Ensures timely and accurate compliance with time recording, payroll, and earned time off policies and procedures.</li> </ul> </li> <li>Develops and maintains relationships with internal business partners to understand their business requirements and offer security solutions. <ul> <li>Meets with internal customers to understand their needs and develop workable security solutions.</li> </ul> </li> <li>Acts as the Liaison with Internal/External Audit, Human Resources, Legal and Finance functions and leads information security audits with significant security considerations, such as PCI, HIPAA, CCPA, GDPR and Sarbanes Oxley.</li> <li>Performs all other duties or special projects as assigned.</li> </ul>
Requirements: <ul> <li>Excellent technical skills with thorough knowledge of IT concepts, procedures and practices, advanced problem-solving skills and the ability to work collaboratively with other departments to resolve complex issues with innovative solutions.</li> <li>Experience with the principles and techniques of security risk analysis with a demonstrable understanding of the management issues involved in implementing security processes and a security-aware culture in a corporate environment.</li> <li>Working knowledge of developing and managing successful MA201, SOX, PCI, HIPAA, ADA, CCPA, GDPR compliance programs.</li> <li>Thorough knowledge of MA201, SOX, PCI, GDPR, CCPA, and HIPAA audit procedures.</li> <li>Proven knowledge of and ability to appropriately handle security incident response and mitigation as well as computer information forensic techniques and practices.</li> <li>Experience leading an information security program for a dynamic organization with ability to lead, motivate, and direct a team of information security specialists.</li> <li>Strong customer service focus with demonstrated ability to successfully build security programs in fast paced ecommerce organizations.</li> <li>Demonstrated ability to work in a matrix organization and to establish productive and professional relationships with IT staff, business partners, management, and operations teams.</li> <li>Proven ability to develop and implement flexible security solutions, dictated by the needs of a rapidly evolving decentralized business environment.</li> <li>Background and style that elicits respect in the organization through management style, technical depth, customer service and results.</li> <li>Interpersonal skills with ability to influence others where there is no direct authority.</li> <li>Excellent communication skills, including presentations and negotiations.</li> <li>Results-oriented with ability to achieve tangible improvements in the corporate information security arena.&nbsp;</li> </ul>