Information Security - Greendale, WI, United States - C3

C3 Greendale, WI, United States

1 week ago

Description

C3 AI is a leading enterprise AI software provider for building enterprise-scale AI applications and accelerating digital transformation

NYSE:
AI) is a leading provider of Enterprise AI software for accelerating digital transformation.

The proven C3 AI Platform provides comprehensive services to build enterprise-scale AI applications more efficiently and cost-effectively than alternative approaches.

The core of the C3 AI offering is an open, data-driven AI architecture that dramatically simplifies data science and application development.

C3 AI is seeking an Information Security expert to own and lead the information security program at C3 AI.

As the Head of Information Security, you will be responsible for protecting the organization's assets, applications, systems, and technology while enabling and advancing business initiatives.

Develop, implement, and monitor comprehensive enterprise cybersecurity and IT risk management program leveraging secure processes, procedures and systems used to prevent, detect, mitigate, and recover from cyberattacks.

Build and drive a cybersecurity strategy and framework, with initiatives to secure the organization's cyber, information and technology assets while providing leadership to the enterprise's information security organization.

Formulate best practices and set security standards, while preparing and documenting information security policies, procedures and protocols.
Lead security assessment processes of internal assets, encompassing penetration testing, vulnerability management, and secure software development.
Analyze the costs, value, and risks of cybersecurity activities and recommend actions within a budget
Continuously evaluate and manage the cyber and technology risk posture of the organization.
Convey information security and data privacy operational goals, relaying their impact to stakeholders.
Keep ahead of security needs by implementing programs or projects that mitigate risks.
Ensure that all internally written code is cyber secure by performing regular application security and penetrations tests.
Conduct real-time analysis of immediate threats, triage and remediate as necessary.
Lead cybersecurity operations and implement disaster recovery protocols and business continuity plans with business resiliency in mind.
Make sure that data and intellectual property is safe from external and internal threats.

Lead security incident investigations and forensic data collection activities during a security breach and conduct post-mortem exercises to prevent reoccurrence.

Act as the focal point for security incident response planning and cyber security breach remediation.
Security Operations and Awareness
Manage the ongoing security awareness training and education program for employees
Provide leadership and fostering a culture of cybersecurity awareness and ensuring continued training and development.
Implement and manage the cyber governance, risk, and compliance frameworks and processes.
Lead compliance endeavors, including external audits, regulatory compliance initiatives, and overarching security evaluations.
Collaborate with the Security Committee to develop and implement information security policies, standards, procedures, and guidelines.

Interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems, and services.

Partner with business stakeholders across the company to raise awareness of risk management concerns and assist with business technology planning.

Conduct and lead information security risk assessments, support audits (SOC 2, HIPAA, ISO 27001/27017, Cyber Essentials), and select controls to mitigate risks.

Work with the legal/privacy teams to ensure compliance with privacy regulations.

Report on Cybersecurity by providing the business leaders, board of directors or senior executives in area of cybersecurity risk profile and posture of organization, notable cybersecurity incident and improvement programs.

Engage with outside stakeholders, including customers, vendors, partners, compliance bodies, and other legal/regulatory authorities.
Deliver strategic risk guidance, evaluating and suggesting technical standards and controls.
Work with executive leadership to determine acceptable levels of risk for the organization.

Work with the most senior levels or the organization to liaise with external agencies, such as law enforcement and other advisory bodies, as necessary, to ensure that the organization maintains a strong security posture.

Communicate with executive leadership on IT risk issues and the security program.
Bachelor's degree in computer science, Information Management Systems, Cybersecurity or related field.

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials.

CCNA, CEH, ISO27001 auditor or implementer experience is a plus.
Minimum 10 years of experience in information security management

Significant experience in leading an information security program with a deep understanding of information security and compliance frameworks such as COBIT, ISO27001/27017, NIST, SOC 2, HIPAA, etc.

Experience with contract and vendor negotiations and management including managed services.

Knowledge of cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data.

Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and nontechnical audiences at various levels in the company.

Proficiency in cyber security tools, especially endpoint security solutions, intrusion prevention systems, data loss prevention systems.
Experience with and understanding of vulnerability assessment, application security testing and penetration testing tools and services.
Well-versed in cloud technology and security, including GCP, Azure and AWS security, Office 365 security, cloud DLP.
Knowledge in industry standard software development practices
Hands-on experience in security assessment, cloud architecture, threat modeling, and policy writing.
In-depth comprehension of secure SDLC, DevSecOps , or security automation.
Ability to communicate effectively with customers and other external information security and privacy professionals.
We do not discriminate on the basis of any legally protected characteristics, including disabled and veteran status.

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

Information Security Manager

2 days ago

Walbec Group Waukesha, United States

**Information Security Manager** · **Construction Resources Management Inc. a Walbec Group Company** · **Waukesha, WI** · Are you looking for an exciting career in road, highway, and bridge construction? Construction Resources Management of the Walbec Group has a place for hard w ...
Information Security Analyst

1 week ago

Amalgamated Bank Greendale, United States

Amalgamated Bank · Welcome to America's socially responsible bank: supporting forward-thinking organizations, companies and people and working to make the world more just, compassionate and sustainable. · View company page · Amalgamated Bank seeks a driven Information Security ...
Information Security Specialist

3 days ago

Equifax Greendale, United States

Equifax · Get credit reports and credit scores for businesses and consumers from Equifax today We also have identity protection tools with daily monitoring and alerts · View company page · Equifax is where you can power your possible. If you want to achieve your true potential ...
Information Security Engineers

1 week ago

D. E. Shaw Research Greendale, United States

D. E. Shaw Research · D . E. Shaw Research develops and uses paradigm-shifting computational technologies to design precisely targeted new therapeutics for the treatment of disease. · View company page · Exceptional information security engineers sought for a New York-based dru ...
Head of Information Security

1 week ago

C3 Greendale, WI, United States

· C3 AI is a leading enterprise AI software provider for building enterprise-scale AI applications and accelerating digital transformation. View company page · , Inc. (NYSE:AI) is a leading provider of Enterprise AI software for accelerating digital transformation. The proven ...
Information Security Analyst

1 day ago

PingWind Inc Greendale, United States

Location: Tampa, FloridaRequired Clearance: TS-SCICertifications: CEH or GSEC or Security+ requiredRequiredEducation: Bachelor's degree in Information Systems, Computer Science, Computer Engineering, or another related field. Experience can be used in lieu of education requiremen ...
Information Security Manager

1 week ago

AIP Connect Greendale, United States

AIP Connect · AIP Connect connects the right people to the right employers with a refreshingly different approach. We are not your typical recruiter. · View company page · Our client a leading technology consultant is seeking an Information Security Manager to oversee the orga ...
IT Information Security Analyst

1 day ago

Birmingham Water Works Greendale, United States

Responsible for constantly detecting and preventing cyber threats to the company computing environment. Identify weaknesses of the company computing infrastructure (software, hardware, networks) and find creative ways to protect it. Plan, implement, upgrade, or monitor security m ...
Senior Information Security Analyst

1 week ago

PingWind Inc Greendale, United States

PingWind is seeking a highly skilled and experienced Senior Information Security Analyst to join our team. As a Security Analyst, you will be responsible for protecting our organization's information systems and data from security threats. You play a key role in implementing and ...
Information Systems Security Officer

5 days ago

Contact Government Services LLC Greendale, United States

Information Systems Security Officer (ISSO) · ISSOEmployment Type: Full-Time, ExperiencedDepartment: Information Technology · CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentati ...
Information Systems Security Manager

4 days ago

Redwood Materials Greendale, United States

Redwood Materials · If you love sustainability, chemistry, materials science, advanced equipment design, automation, and seeing your hard work pay off, you will enjoy building your career here. · View company page · About Redwood Materials · Redwood Materials was founded in 20 ...
Information System Security Engineer

1 week ago

Dark Wolf Solutions Greendale, United States

Information System Security Engineer (ISSE) · Dark Wolf Solutions · The Alphaof technology Dark Wolf Solutions operates at the nexus of mission and technology to meet our Nation's most challenging missions. JOIN THE PACK Connect Our Background About Us We combine the most innov ...
Information Security Analyst III

4 days ago

Global Payments Greendale, United States

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions an ...
Information Systems Security Officer

3 days ago

Guidehouse Greendale, United States

Information Systems Security Officer (ISSO) · Guidehouse · Guidehouse is the only scaled consultancy in the world to fully integrate commercial and public or government businesses within each of our industry segments because complex problems require both perspectives to address ...
INFORMATION SECURITY ANALYST II

1 week ago

TE Connectivity Greendale, United States

INFORMATION SECURITY ANALYST II (Hybrid) · At TE, you will unleash your potential working with people from diverse backgrounds and industries to create a safer, sustainable and more connected world. · Job Overview · TE Connectivity's Information Security and Compliance Teams ex ...
Information Systems Security Manager

1 week ago

Redwood Materials Greendale, United States

Redwood Materials · If you love sustainability, chemistry, materials science, advanced equipment design, automation, and seeing your hard work pay off, you will enjoy building your career here. · View company page · About Redwood Materials · Redwood Materials was founded in 201 ...
Information Security Associate/ Analyst

2 days ago

Federal Reserve System Greendale, United States

Information Security Associate/ Analyst (Hybrid) · Federal Reserve System · The Federal Reserve Board of Governors in Washington DC. · View company page · Company · Federal Reserve Bank of PhiladelphiaWhen you join the Federal Reserve—the nation's central bank—you'll play a ...
Information Security Analyst II

2 days ago

Datadog Greendale, United States

Information Security Analyst II - Compliance Monitoring · Datadog · See inside any stack, any app, at any scale, anywhere. · View company page · The Governance, Risk and Compliance (GRC) team works within the Information Security organization and across Datadog to implement, ...
Senior Information Security Analyst

2 days ago

Definitive Healthcare Greendale, United States

Definitive Healthcare · Transform data, analytics and expertise into healthcare commercial intelligence. Uncover the right markets, opportunities and people to shape healthcare's future. · View company page · At Definitive Healthcare, our passion is to transform data, analytic ...
Information Systems Security Manager

5 days ago

STR Greendale, United States

Information Systems Security Manager (ISSM) · STR has an exciting opportunity for or an ISSM that will be responsible for classified programs Cybersecurity/Risk Management Framework (RMF) posture in accordance with government directives and program requirements. In this dynamic ...