Manager, Security & Privacy Compliance

BravoTECH, a leader in IT staffing and staff augmentation services, seeks Manager, Security & Privacy Compliance for our preferred Grapevine, TX based manufacturing client. The qualified candidate must have at least at least 7 years of information security experience and previous experience assessing user role-based security controls in an SAP ECC 6.0 ERP environment, and with underlying SAP data structures. The Manager in Security and Privacy Compliance will promote and enforce compliance with state/federal laws and regulations affecting the financial services companies for this corporation. Responsibilities include: auditing, investigating, training/education and enforcement, ongoing consultation on compliance issues impacting businesses, monitoring and reporting on adherence to compliance controls helping businesses to implement compliance controls. The position provides thought leadership and is responsible for Corporations Information Security and Data Privacy program compliance and activities to help maintain the confidentiality, integrity and availability of the organization' s critical technology infrastructure and information. Job Responsibilities:

• Maintains current knowledge of applicable regulatory and compliance issues related to Information Security and Data Privacy. Applies this knowledge to plan, develop, document, maintain, monitor, and report on adherence to regulatory and compliance requirements.
• In association with the Information Systems Department (IS), Compliance Department (Compliance), Office of the General Counsel (Legal), and company management, maintains information security, cybersecurity and privacy policies and procedures for the Company.
• Implements and monitors the Company' s information security, cybersecurity and privacy policies and procedures with special attention paid to following good/best security practices.
• Conducts analysis and trending of incidents/events detected from SIEM, IDS/IPS, and other security applications.
• Understands the threat landscape and attack trends as they relate to intelligence gathering, dissemination and defense coordination.
• Coordinates and executes quarterly Executive Security and Privacy Steering Committee meetings.
• Facilitates monthly Security and Privacy Working Group meetings.
• Tracks and reports on business-relevant metrics to measure the efficiency and effectiveness of the Information Security and Privacy Programs.
• Solicit for appropriate resources to increase the maturity of the security and privacy programs.
• Builds strong relationship with business leaders, Human Resources, and Legal to ensure connectivity to the business.
• Maintains confidentiality of sensitive investigative information.
• Consults and provides security and privacy insight for new computing system designs or upgrades
• Understands effective communication across all levels of the organization with the appropriate message, the right tone and the appropriate level of impact and can make the complex seem less complex, is a consensus builder and brings people together.
• Maintains the perseverance to drive and sustain continuous improvement, while being resilient and flexible.
• Maintains security policies and standards.
• Operates in an ethical manner demonstrating integrity and good character.
• Partners with Vendor Management to ensure contracts and agreements are in line with security and privacy obligations.
• Other duties as assigned by management.

• Bachelor' s Degree-secondary education in computers preferred:
• In lieu of a degree at least 7 years of information security experience required.
• Certification Required: A minimum of one security specific industry certification is required.
• At least 2 years' experience working for captive financial institutions preferred.
• Deep working knowledge of federal and state information security, cybersecurity and privacy laws, as well as customary contractual requirements.
• Strong understanding of information security principles, architecture and methodologies (including risk assessment and audit methodologies). Proven experience developing security, data privacy and information risk assessment programs.
• Knowledge of common information security & privacy frameworks (such as NIST and ISO 27001).
• Previous experience assessing user role-based security controls in an SAP ECC 6.0 ERP environment, and with underlying SAP data structures.

• 972-419-1618
• mfyffe@bravotech.com