• Develop, implement and monitor a strategic, comprehensive enterprise information security and risk management program;
• Work across organizational functions to facilitate risk assessment, risk management and implement sensible controls
• Ensure Compliance with SEC/NFA guidelines, HIPPA, ISO 27001, COBIT, and NIST standards.
• Develop and enhance an information security framework;
• Develop and implement a comprehensive incident response program;
• Monitor global and industry-specific threats and develop mitigation strategies;
• Work to raise awareness of risk management and security practices across the enterprise;
• Provide leadership and mentoring to two direct reports on the security team;
• Contribute as a senior member of the technology team to all technology planning and implementation processes and ensure that Security is a component of all key decisions