Jobs via Dice
Dice is the leading career destination for tech experts at every stage of their careers. Our client, Flybridge Staffing, is seeking a Director of InfoSec/Cybersecurity for a client that develops and delivers innovative merchant payment processing and point‑of‑sale solutions nationwide. Apply via Dice today!
This role will be centralized in our Boca Raton office, with
remote work 90%
of the time. The selected candidate will mature the company's cybersecurity and information security posture, strengthening overall security controls across the enterprise to meet and exceed industry security standards such as PCI and SOC‑1 compliance through the implementation of sound policies, procedures, and tools to secure customers and company information. Responsibilities
Initiate, develop, and maintain information security policies and procedures. Ensure security strategies are followed to meet organizational security goals and industry standards such as PCI and SOC‑1. Identify security risks, coordinate and perform risk assessments, facilitate security incident responses, and validate security controls as needed. Document all security policies and promote activities and procedures to create a general awareness about the significance of security within the company. Review the security plans implemented on systems throughout the organization and act as an information security consultant. Ensure IT security best practices and configurations are included in network, desktop, server, wireless, VoIP, and mobile configurations. Configure, implement, monitor, and support security software/systems that ensure compliance with regulatory, industry, and corporate policies and procedures — including IDS/IPS, secure file transfer, DLP, encryption, firewall rule assessments, log management/correlation, secure password storage/retrieval, application listing, vulnerability management, threat hunting, etc. Respond to security‑related tickets escalated from various departments and collaborate across teams to manage expectations during issue resolution. Monitor, analyze, and respond to SIEM alerts from monitoring tools and third‑party vendors. Perform regular inspections and tests (e.g., external and internal penetration tests) to ensure security of sensitive information. Assist in routine system and network management tasks such as change management, system updates, patch management, backup, and recovery of server and desktop systems. Assist the IT Department in assessing technological risks. Minimum Qualifications
BA or BS degree and/or equivalent combination of education and experience. At least 10 years of experience in a medium or large‑sized enterprise or service provider IT organization. Minimum of six (6) years’ experience in IT security infrastructure, design, operations, and information assurance. Deep understanding and 5+ years of experience working with industry‑leading security platforms (e.g., firewalls, IDP/IDS, anti‑virus, threat intelligence, vulnerability management). Additional Requirements
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Information Systems Security Engineering Professional (ISSEP) or other certifications preferred. Hands‑on experience as an incident first responder or incident response manager. Hands‑on experience building, administering, and maintaining Windows, Linux, and virtualization technologies. Expert knowledge of patch and vulnerability management processes. Knowledge of cloud technologies with current experience and training. Knowledge of network protocols, utilities, and topics. Knowledge of vulnerability and threat management solutions. Knowledge of desktop and backup technologies. NO SPONSORSHIP AVAILABLE**** please. If your background aligns with the above details and you would like to learn more, please submit your resume to our website; a recruiter will be in touch with you ASAP. Seniority Level: Director Employment Type: Full‑time Job Function: Information Technology Industries: Software Development
#J-18808-Ljbffr
remote work 90%
of the time. The selected candidate will mature the company's cybersecurity and information security posture, strengthening overall security controls across the enterprise to meet and exceed industry security standards such as PCI and SOC‑1 compliance through the implementation of sound policies, procedures, and tools to secure customers and company information. Responsibilities
Initiate, develop, and maintain information security policies and procedures. Ensure security strategies are followed to meet organizational security goals and industry standards such as PCI and SOC‑1. Identify security risks, coordinate and perform risk assessments, facilitate security incident responses, and validate security controls as needed. Document all security policies and promote activities and procedures to create a general awareness about the significance of security within the company. Review the security plans implemented on systems throughout the organization and act as an information security consultant. Ensure IT security best practices and configurations are included in network, desktop, server, wireless, VoIP, and mobile configurations. Configure, implement, monitor, and support security software/systems that ensure compliance with regulatory, industry, and corporate policies and procedures — including IDS/IPS, secure file transfer, DLP, encryption, firewall rule assessments, log management/correlation, secure password storage/retrieval, application listing, vulnerability management, threat hunting, etc. Respond to security‑related tickets escalated from various departments and collaborate across teams to manage expectations during issue resolution. Monitor, analyze, and respond to SIEM alerts from monitoring tools and third‑party vendors. Perform regular inspections and tests (e.g., external and internal penetration tests) to ensure security of sensitive information. Assist in routine system and network management tasks such as change management, system updates, patch management, backup, and recovery of server and desktop systems. Assist the IT Department in assessing technological risks. Minimum Qualifications
BA or BS degree and/or equivalent combination of education and experience. At least 10 years of experience in a medium or large‑sized enterprise or service provider IT organization. Minimum of six (6) years’ experience in IT security infrastructure, design, operations, and information assurance. Deep understanding and 5+ years of experience working with industry‑leading security platforms (e.g., firewalls, IDP/IDS, anti‑virus, threat intelligence, vulnerability management). Additional Requirements
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Information Systems Security Engineering Professional (ISSEP) or other certifications preferred. Hands‑on experience as an incident first responder or incident response manager. Hands‑on experience building, administering, and maintaining Windows, Linux, and virtualization technologies. Expert knowledge of patch and vulnerability management processes. Knowledge of cloud technologies with current experience and training. Knowledge of network protocols, utilities, and topics. Knowledge of vulnerability and threat management solutions. Knowledge of desktop and backup technologies. NO SPONSORSHIP AVAILABLE**** please. If your background aligns with the above details and you would like to learn more, please submit your resume to our website; a recruiter will be in touch with you ASAP. Seniority Level: Director Employment Type: Full‑time Job Function: Information Technology Industries: Software Development
#J-18808-Ljbffr