Director of IT Security

PHI Aviation•Dallas, TX

About The Position

The Director of IT Security is responsible for overseeing the organization’s information security program to protect the integrity, confidentiality, and availability of the organization’s data and IT infrastructure. This role involves developing, implementing, and maintaining security policies, standards, and procedures, and ensuring compliance with relevant regulations and best practices. The Director of IT Security will manage security incidents, and work collaboratively with other departments to mitigate security risks.

Requirements

Bachelor’s degree in Information Security, Computer Science, or a related field
Professional certifications such as CISSP, CISM, or CISA.
Minimum of 10 years of experience in information security, with at least 5 years in a leadership role.
In-depth knowledge of regulatory requirements and standards relevant to aviation and healthcare.
Proven experience in developing and implementing security strategies and technologies.
Excellent leadership, communication, and interpersonal skills.
Ability to work effectively in a fast-paced, dynamic environment.
Must have hands-on technical skills to evaluate technology, design, and document controls.

Nice To Haves

Master’s degree preferred.

Responsibilities

Develop and implement a comprehensive information security strategy aligned with organizational goals.
Provide leadership and direction for the information security program, including governance, risk management, and compliance.
Identify, assess, and prioritize information security risks, and develop strategies to mitigate these risks.
Ensure compliance with relevant regulatory requirements and standards, including HIPAA, GDPR, DFAR, SOX and industry-specific regulations.
Establish and maintain security policies, procedures, and standards.
Monitor compliance with information security policies and procedures and take corrective action as needed.
Develop and implement an incident response plan, including detection, response, and recovery processes.
Lead the response to security incidents, including investigation, mitigation, and reporting.
Oversee the implementation and management of security technologies and tools, including firewalls, intrusion detection/prevention systems, and encryption.
Ensure the secure design, development, and deployment of IT systems and applications.
Develop and implement an information security awareness and training program for all employees.
Foster a culture of security awareness and vigilance across the organization.
Collaborate with other executives and stakeholders to integrate security into business processes and initiatives.
Communicate security risks and strategies to the board of directors, executive team, and other key stakeholders.
Assess and manage the security posture of third-party vendors and partners.
Develop and enforce security requirements and agreements for external partners.