We are currently seeking a Senior Director IT Security Governance, Risk and Compliance.  In this position, you will be responsible for identifying, analyzing, and influencing the management of information risks across the organization.  This role includes management of technology risk, IT governance, IT compliance and overall risk management across the org. Leading this effort will include management of the Security Business Liaisons to effectively partner with internal and external groups in reporting out risk at multiple levels. Driving controls mapping, risk alignment & analytics along with meeting governance and compliance criteria are all inclusive of this leadership role.

Key Accountabilities:

• Building and maintaining information security policies, procedures and processes. Ensuring they are reviewed, current and up to date on a regular basis.
• Establishing a Create-Communicate-Execute process for all policies and working with relevant departments (e.g. Corporate Communications) to this end goal.
• Involved in customer, partner and vendor risk assessments and communicates them to information security “customers,” or business partners.
• Building and leading security awareness and training around InfoSec for the organization.
• Being directly involved with communicating information security awareness, updates, best practices, etc. to all employees, contractors, etc.
• Building out and executing upon a risk management strategy with roadmap deliverables, maturity modeling, risk register/catalog development and security/risk metrics.
• Developing, building and maintaining a common controls framework to map to NIST CSF, HIPAA, Privacy regulations, local, state and Federal regulations, etc. Providing reporting and metrics toward the alignment of controls to risks and showing maturity models against it.
• Interfacing with Privacy Office and team to identify and address cyber risks to the organization, partners, customers, etc.
• Leading the Business Unit Liaison team to provide consultative advice that enables making informed, risk-based management decisions.
• Maintaining strong working relationships with individuals and groups involved in managing information risks across the organization.
• Performing focused risks assessments and communicating them to information security “customers,” or business partners.
• Identifying and implementing appropriate controls to effectively manage information risks as needed.
• Identifying opportunities to improve risk posture, developing solutions for remediating or mitigating risks and assessing the residual risk.

KEY ACCOUNTABILITIES

Percentage of Time

20%

Building out and executing upon a risk management strategy

20%

Building and maintaining information security policies, procedures and processes

10%

Developing, building and maintaining a common controls framework

10%

Interfacing with Privacy Office and team to identify and address cyber risks

20%

Leading the Business Unit Liaison team to provide consultative advice that enables making informed, risk-based management decisions

20%

Identifying opportunities to improve risk posture

TOTAL = 100%  

SUPERVISORY RESPONSIBILITIES

DIRECT REPORTS:

3

INDIRECT REPORTS:

0

EDUCATION AND EXPERIENCE

MINIMUM REQUIREMENTS

PREFERRED

• Bachelors’ degree required. Master’s degree preferred in computer science or similar
• 7+ years of information security experience required
• One or more of the following certifications is required: CISSP, CRISC, CHP, CHSE, GSEC, CISM/CISA, ITIL and/or other related Information Security certification.
• A solid understanding of governance, risk and compliance required
• Strong presentation, verbal and written communication skills with the ability to articulate complex ideas in easy to understand business terms to all levels of management including senior leaders required
• Knowledge of and experience with privacy and security law issues, particularly HIPAA, required
• Knowledge of information risk management governance, policies, & libraries, analytics & reporting, and issue management required.
• Experience working with current and emerging information security technologies and development methodologies required.
• Strong collaboration skills
• trong business acumen
• Understanding of respective industry best practices (e.g., NIST, HIPAA, HITRUST, ISO, COBIT, OWASP, ITIL, etc.).
• Excellent collaboration skills including ability to lead cross functional teams and build consensus.
• Demonstrates working knowledge with MS-Office suite of software applications and tools, including: Microsoft Word, Excel, PowerPoint, and MS-Project, MS-Outlook

Required Skills Required Experience

Required Skills:

• College degree in business management, production operations management, agricultural science, food science is require
• Seven or more years supervising and managing departments and individuals involved in meat processing activities, preferred.
• Ability to use the Microsoft Office suite of applications; specifically using Word to create and modify documents, Excel to record data and calculate results, and Outlook to communicate internally and externally.
• Must be dependable, adaptable, detail-oriented, able to follow directions, able to work under minimal supervision.
• May be required to work weekends and extended days.
• May be required relocation to other OSI facilities for multi plant experience.
• Work is generally performed within a manufacturing environment subjected to temperatures of cold and warm along with wearing the proper PPE, with standard office equipment available along with plant manufacturing environment.
• While performing the duties of this job, the employee is regularly required to sit, stand, bend, walk, use hands or finger, talk, hear, feel objects, tools, or controls; may be required to lift up to 50 pounds. Vision abilities include close vision to a computer screen.
• Overnight Travel may be expected up to 25%.

OSI Industries is an Equal Employment Opportunity employer that believes everyone has the right to be treated with dignity and respect. OSI does not discriminate on the basis of national origin, gender, race, color, religion, pregnancy, gender identity, sexual orientation, protected veteran status, disability, or any other characteristic protected by applicable law. All applicants will receive consideration for employment based on merit, qualifications and business needs. OSI participates in the E-Verify program.