About Neustar Security Services
At Neustar Security Services (NSS), you have the power to be your authentic self, to be curious, to run with your idea, and to celebrate a good day. Our solutions secure your digital presence against risks and downtime while leaving you open for opportunities, ensuring your customers enjoy consistent, uninterrupted, quality interactions. We are growing fast, and we are looking for smart, motivated people to join our team.
Summary of Position
Neustar Security Services (NSS) is looking for a Director, Information Security that has a strong
background in understanding and identifying complex distributed systems that interact, receive and exchange data with multiple partner sources. The Director, Information Security will be able to identify, manage, and remediate any risks that can impact the organization. The model candidate will have a sensible approach of security and business operations and is able to interpret technical risk to business impact to leadership.
Responsibilities
Develop and coach outsourcing provider relationships to execute on Information Security strategy throughout the corporate and production environments
Driving security architecture best practices and processes throughout the organization, balancing business priorities, information security risks, emerging threats, to ensure the confidentiality, integrity and availability of the company’s networks, systems and applications
Working with leadership to develop security standards, policies, and procedures
Experience with the assessment, implementation, management and documentation of a broad set of information security technologies and processes (e. g., app security, data protection, access management, network security) within a cloud environment
Partnering with Governance, Risk and Compliance (GRC), Product Engineering, Identity and Access Management (IDM), and CIRT teams to monitor and ensure compliance to standards, policies, and procedures
Functioning as a Subject Matter Expert (SME) providing solution designs and technical consulting services to support compliance with all applicable requirements including internal policy, PCI-DSS, SOC2, state/federal/international data privacy laws, and NIST/CIS guidelines
A thorough understanding of the organization's technology and IT systems
Experience with developing, reviewing, and approving the installation requirements for LANs, WANs, VPNs, routers, firewalls, and related security infrastructure and devices
Researching and designing public key infrastructures, certification authorities, and digital signatures, and ensuring all personnel have IT access limited to their need and role in the organization
Approvals of security system designs and updating and upgrading as needed
Establishing disaster recovery procedures and conducting security breach drills
Staying up-to-date with the latest security systems, standards, authentication protocols, and products
Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies
Keen understanding of national and international laws, regulations, policies and ethics
Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements or remediation
Responsible for system security and vulnerability analyses and risk assessments through teams, vendors and/or outsourced providers in corporate and production environments
Lead all aspects of a Security Operations Center to monitor and investigate emerging threats (or coordinate SOC through outsourced providers)
Provide leadership and focus for a 24x7 CIRT that is responsible for Incident Response and Threat Intel
Work closely with Security Architecture & Engineering teams to pursue scalable automated security solutions
Oversee DFIR capabilities in the investigation of security breaches, and assist with any associated legal matters
Partner cross-functionally with key business stakeholders to influence and ensure alignment and support for the Global Security Operations mandate
Responsible for the ongoing development and implementation of Neustar Security Solutions’ operational cybersecurity plans and initiatives
Partners with business owners to align strategy, operating plans, and department goals with the current and emerging work of the institution; designs and delivers related communications, including executive summaries of strategy, related risks, rewards, and costs
Implements a metrics-based focus for measuring performance, availability, service levels, and vendors
Requirements
15+ years of progressive security leadership and management experience in multi-disciplinary environments including enterprise-grade information technology infrastructure, technology support and cybersecurity
7+ years' experience managing teams with both direct and indirect reports (i.e. outsourcing)
Practical Threat Hunting and Intel experience
Ability to interact with and present to top executive leaders
Experience with red teaming and other offensive security roles preferred
Experience leading an advanced incident response capability
Maintain hyper-current knowledge of threat landscape, attacker techniques and mitigations
Demonstrable record of delivering critical security solutions within tight time frames, with multiple stakeholder groups, and competing priorities
Directs and manages through analysis, planning, design, development, testing, and maintenance of systems
Professional certifications such as AWS Certified Solutions Architect or Certified Information Systems Security Professional (CISSP)
Experience in Offensive or Defensive Security techniques
Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management
Additional Information Is this you?
Takes ownership
Demonstrates initiative
Drives for continual improvement
Curious - investigates new technologies
Doesn't accept the status quo.
Total Rewards
At Neustar Security Services, we are committed to the growth and development of our employees whose individual skills, curiosity, and passion for their work, contribute to the overall success of our business. Our core values (Accountability, Collaboration, Transparency, Resilience, and Respect) are the driving force of our culture across our locations around the globe. We offer our employees a comprehensive benefits package including perks such as tuition reimbursement, awesome company discounts, back-up day care, community service events, pet and baby swag and much more! We are all learning and creating together; and having some major fun along the way. JOIN US! We can’t wait to meet you!