**DESCRIPTION** **The Director of Information Security** is responsible for providing vision, leadership and expertise to develop and support information security management, operation, and security controls. The Director also has responsibility for building an accountable, information security-conscious culture and a system security infrastructure built on best-in-class standards and effective operational procedures. This role will primarily oversee: _Firewalls, Proxy Servers, Cloud Access Security Broker (CASB), Active Directory Security, Security Information and Event Management (SIEM), and Managed Security Service Provider (MSSP)_ . **RESPONSIBILITIES** **Essential Functions of this Position** * Responsible for the strategic leadership of the information security program and operational activities * Develops, implements, and monitors a strategic, comprehensive enterprise information security program to ensure that the integrity, confidentiality, and availability of information that is owned, controlled, or processed by the organization * Facilitate the identification of risks and integration of those risks into the information security risk assessment, providing direction on appropriate controls and guidance on control testing * Establishes annual security and compliance goals, defines security strategies, metrics, reporting mechanisms and program services * Develops and maintains a roadmap for continual program improvements * Develops and enhances an information security management and control framework based on appropriate information security industry standards to measure the efficiency and effectiveness of the program, facilitates appropriate resource allocation, and increases the maturity of the security * Lead the identification and definition of the organization’s information security risk appetite and mitigate information security risks based on level of tolerance * Maintenance of information security policies and procedures * Ensure compliance and direct the security component of internal, external, and third-party audits * Lead the Incident Response Team through the handling of any security related incidents * Other duties as assigned **QUALIFICATIONS** **Minimum Education and Work Experience** * Bachelor’s Degree from an accredited institution in Information Systems, Information Security, or related field or related experience preferred; _some experience may be substituted for some of the above education_ * 15+ years of experience in a field related to information security * 8+ years of supervisory/management experience * One or more of the following **certifications required** : CISSP, CRISC, C|CISCO, CISM, CISA **Knowledge, Skills, and Abilities Requirements** * Proven experience with current IT security technologies and information security frameworks * Ability to successfully manage and execute multiple projects using established project management tools and processes * Expertise in Firewall Security, Proxy Servers, Active Directory Security, SIEM, and MSSP **ABOUT US** Acosta and Mosaic are the sales and marketing powerhouses behind the most recognized and proven brands with top retailers in the United States and Canada. We offer flexible services that maximize efficiency. Acosta has the talent and technology to build data-, reach- and relationship-driven strategies to execute those strategies, and the tools to monitor, track and optimize metrics-based results for customers and retailers. Acosta and its subsidiaries, in good faith, believes that this posted range of compensation is the accurate range for this role at the time of this posting. Acosta may ultimately pay more or less than the posted range depending on candidate qualifications and locations. This range may be modified in the future. Acosta and its subsidiaries is an Equal Opportunity Employer We are committed to providing accommodations for persons with disabilities. If you require accommodation, we will work with you to meet your needs, to the extent required by law. The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. Mosaic reserves the right to modify all or part of any job descriptions at its discretion in order to meet and or exceed the needs of the business. _By submitting your application you agree with and accept the Acosta Privacy Statement and Terms of Conditions._ **Acosta et Mosaic** sont les **forces motrices** en matière de **ventes et de marketing** derrière les marques les plus reconnues et éprouvées auprès des principaux détaillants aux États-Unis et au Canada. Nous proposons des services flexibles qui maximisent l’efficacité. Acosta possède le talent et la technologie nécessaires pour élaborer des stratégies axées sur les données, la portée et les relations, afin de mettre en œuvre ces stratégies, ainsi que les outils pour surveiller, suivre et optimiser les résultats basés sur les indicateurs pour les clients et les détaillants. **Acosta et ses filiales** , de bonne foi, estiment que cette fourchette de rémunération affichée est la fourchette précise pour ce poste au moment de cette publication. Acosta pourrait finalement payer plus ou moins que la fourchette affichée en fonction des qualifications des candidats et des lieux. Cette fourchette peut être modifiée à l’avenir. **Acosta et ses filiales** sont des employeurs offrant **l’égalité des chances** . Nous nous engageons à fournir des **aménagements pour les personnes handicapées** . Si vous avez besoin d’un aménagement, nous travaillerons avec vous pour répondre à vos besoins, dans la mesure requise par la loi. Les déclarations ci-dessus ont pour but de décrire la nature générale et le niveau de travail effectué par les personnes affectées à cette classification. Elles ne doivent pas être interprétées comme une liste exhaustive de toutes les responsabilités, tâches et compétences requises du personnel ainsi classé. Mosaic se réserve le droit de modifier tout ou partie des descriptions de poste à sa discrétion afin de répondre aux besoins de l’entreprise, voire de les dépasser. En soumettant votre candidature, vous acceptez et acceptez la **Déclaration de confidentialité d’Acosta et les Conditions d’utilisation** . Acosta, and its subsidiaries, is an Equal Opportunity Employer **Job Category:** Administration **Position Type:** Full time **Business Unit:** Corporate **Salary Range:** $125,000.00 - $150,000.00 **Company:** Acosta Services, Inc **Req ID:** 3841