VP Information Security

Texas Mutual•Austin, TX

11d•Hybrid

About The Position

We're excited you're considering joining a great place to work! At Texas Mutual, we value our employees. Our service-inspired culture, great compensation and benefits package, award-winning wellness program and excellent career opportunities make Texas Mutual a great place to work. In the Vice President Information Security role, you will serve as our Chief Information Security Officer, reporting directly to the Chief Transformation Officer. As the VP of Information Security, you will assume overall responsibility for securing information assets and associated technology, applications, systems within the organization and in the wider cloud and provider ecosystem. Working for Texas Mutual brings many benefits. You'll also have the opportunity to work from anywhere in the U.S. for two weeks each year, in addition to vacation, personal and sick time. Giving back to the community is at the heart of what we do. You can volunteer during the workday with organizations that are most meaningful to you. Located in heart of Mueller, you will enjoy a modern office surrounded by parks, restaurants and shopping, our on-site fitness center and more.

Requirements

Bachelor's degree in business or a technology related field
Professional security management certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA) or other similar credentials
Ten years of progressive experience in a combination of risk management, information security and IT, with at least five years of experience in a management position
Any equivalent combination of education, training, and experience that provides the skills necessary to perform the essential function of the job
Must maintain valid Texas Driver's License, or available alternate means of transportation
Knowledge of methodologies and trends in both business and IT
Experience in cloud security implementation, management, policies and practices
Track record and experience developing information security procedures, and experience securing cloud technologies
Experience acting calmly and competently in high-pressure, high-stress situations
Knowledge of relevant legal and regulatory requirements, such as: Sarbanes-Oxley Act (SOX), and Health Insurance Portability and Accountability Act (HIPAA)
Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT and those from NIST, including 800-53 and Cybersecurity Framework
Experience managing information security in a HIPAA (Health Insurance Portability and Accountability Act) regulated environment

Nice To Haves

Prior CISO, VP of Security, or equivalent leadership role.
Demonstrated experience with practices and strategies related to the responsible use and secure adoption of AI in enterprise environments
Professional experience working for an insurance company or within the insurance sector

Responsibilities

Evolve the current information security strategy that aligns with organizational priorities
Evolve the information security management program to ensure cyber resiliency and continuous improvement of the security reference architecture
Identify strategic initiatives and providing oversight of these implementations to grow and maintain a strong security posture across the organization.
Identify, communicate and manage cybersecurity and technology risk through a shared vision with business leaders by consulting with and providing expert advice to senior management and their organizations in the development, implementation, and administration of information security and privacy policies, procedures, infrastructure and controls.
Report on the organization's security posture and risk profile to the executive team and the Board of Directors
Provide developmental leadership for staff to support the Information Security function.
Provide oversight of the Security Operations and Security Architecture & Engineering functions to ensure the implementation of security capabilities
Evolve the culture of security maturity to include targeted information security awareness program, information security program, and established metrics to measure the effectiveness of the programs
Engage with the cybersecurity community (vendors and practitioners) to evaluate emerging cybersecurity threats, technologies, and best practices
Manage and contain information security incidents and events to protect company IT assets, intellectual property, regulated data and our reputation
Maintain strong working relationships with cross-functional teams, including DevOps, IT Infrastructure, Legal, Privacy, Engineering, Data and ensure the integration of security into business processes
Maintain responsibility for management of assigned operations