Information Security Lead

About the role

As the Information Security Lead at Bamboohr, you will play a pivotal role in safeguarding our digital assets and ensuring the integrity of our information systems. You will be responsible for developing and implementing comprehensive security strategies that align with our organizational goals. This position requires a proactive approach to identifying vulnerabilities, managing risks, and ensuring compliance with industry standards. You will collaborate with cross-functional teams to foster a culture of security awareness and best practices throughout the organization.

Key facts

What you'll do

• Develop and maintain a robust information security strategy that aligns with Bamboohr's business objectives and regulatory requirements.
• Conduct regular risk assessments and vulnerability analyses to identify potential threats to the organization's information systems.
• Implement and manage security protocols, policies, and procedures to protect sensitive data and ensure compliance with relevant laws and regulations.
• Collaborate with IT and other departments to integrate security measures into existing systems and processes.
• Lead incident response efforts, including the investigation of security breaches and the implementation of corrective actions.
• Provide guidance and training to employees on security best practices and the importance of safeguarding company information.
• Monitor security systems and tools to detect and respond to potential threats in real-time.
• Prepare and present reports on security metrics, incidents, and compliance status to senior management and stakeholders.
• Stay abreast of emerging security trends, technologies, and regulatory changes to ensure Bamboohr remains at the forefront of information security.
• Foster relationships with external security partners and vendors to enhance the organization's security posture.
• Participate in audits and assessments to evaluate the effectiveness of security controls and identify areas for improvement.
• Lead a team of security professionals, providing mentorship and support to enhance their skills and career development.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 5 years of experience in information security, with a focus on risk management and compliance.
• Proven experience in developing and implementing security policies, procedures, and protocols.
• Strong knowledge of security frameworks and standards, such as ISO 27001, NIST, and GDPR.
• Experience with security tools and technologies, including firewalls, intrusion detection systems, and encryption solutions.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong communication skills, both verbal and written, with the ability to convey complex security concepts to non-technical stakeholders.
• Relevant security certifications, such as CISSP, CISM, or CISA, are highly desirable.
• Experience in leading security teams and managing cross-functional projects.
• Familiarity with cloud security and data protection strategies is a plus.

Nice to have

• Experience in the healthcare or life sciences industry, particularly with regulatory compliance such as HIPAA.
• Knowledge of secure software development practices and DevSecOps methodologies.
• Familiarity with threat intelligence platforms and incident response frameworks.

Skills & tools

• Proficient in security information and event management (SIEM) tools.
• Familiarity with endpoint protection and network security solutions.
• Experience with vulnerability management and penetration testing tools.
• Knowledge of programming languages such as Python or JavaScript for automation and scripting tasks.
• Strong understanding of data privacy laws and regulations.
• Ability to work with cloud platforms such as AWS, Azure, or Google Cloud.

Practical notes

• This position is based in an unknown location, and candidates should be prepared for potential relocation or remote work options.
• The salary for this role is competitive and will be determined based on the candidate's experience and qualifications.
• Bamboohr is committed to fostering a diverse and inclusive work environment and encourages applications from individuals of all backgrounds.
• Interested candidates can apply through the provided link: https://proscia.bamboohr.com/careers/265.

META

Company: Bamboohr

Title: Information Security Lead

Listed

location: Unknown

Job type: Full-time