Information Security Engineer-US

Nonfat Media is seeking an Information Security Engineer to develop and implement cybersecurity strategies, policies, and practices. The role leads risk management, security governance, incident response, security architecture, employee training, vendor risk management, and security monitoring and reporting.

Responsibilities:

• Develop and lead the implementation of the organization's cybersecurity strategy, ensuring alignment with business objectives
• Provide strategic direction and vision to the cybersecurity team, fostering a culture of security awareness and compliance throughout the organization
• Conduct regular risk assessments to identify and prioritize cybersecurity risks
• Develop and implement risk mitigation strategies and controls to safeguard the organization against potential threats
• Establish and maintain effective security governance frameworks, policies, and procedures
• Ensure compliance with relevant laws, regulations, and industry standards related to information security
• Develop and maintain an incident response plan, including coordinating the response to cybersecurity incidents
• Conduct post-incident analysis to identify root causes and recommend improvements to prevent future incidents
• Collaborate with IT and business units to integrate security best practices into the design and development of systems and applications
• Ensure the continuous evaluation and enhancement of security architecture to address emerging threats
• Implement a comprehensive security awareness program for employees, promoting a security-conscious culture
• Provide training on cybersecurity best practices and conduct regular drills to test the organization's readiness for security incidents
• Oversee the assessment and management of cybersecurity risks associated with third-party vendors and partners
• Ensure that vendors adhere to the organization's security standards and policies
• Implement and manage security monitoring tools and processes to detect and respond to security events
• Generate regular reports on the organization's cybersecurity posture and incidents for executive leadership

Requirements:

• Candidates must be authorized to work and reside in either California, New York, Nevada or Rhode Island
• Bachelor's or Master's degree in Information Security, Computer Science, or a related field
• Proven experience in a cybersecurity leadership role
• Strong understanding of cybersecurity technologies, risk management, and compliance
• Knowledge of current AI tools as they apply to this field
• Excellent leadership, communication, and interpersonal skills
• Industry certifications such as CISSP, CISM, or CISA are highly desirable