Chief Information Security Officer

General Information

Press space or enter keys to toggle section visibility

City

Cary

State/Province

North Carolina

Country

United States

Department

Information Management

Date

Wednesday, July 31, 2024

Working time

Full-time

Ref#

20033750

Job Level

Executive

Job Type

Experienced

Job Field

Information Management

Seniority Level

Executive

Currency

USD - United States - US

Annual Base Salary Minimum

209,100

Annual Base Salary Maximum

418,200

The salary range above represents the low and high end in the local currency of Xerox’s salary range for this position and is reflected in an annualized amount. Actual salaries will vary based on factors including, but not limited to, geographic location, market competition, and/or the successful applicant’s education, experience, knowledge, skills, and abilities. The range listed is just one component of Xerox’s total compensation package for employees. Employees are also afforded a comprehensive suite of benefits, to view those details please visit Xerox Careers for your applicable country. If you are not reviewing this job posting on Xerox Careers (https://xerox.avature.net/en_US/careers) , we cannot guarantee the validity of this posting. For a list of our current internal postings, please visit Xerox Careers (https://xerox.avature.net/en_US/careers) .

Monthly: Monthly rates for this position can be shared with you per your location, this rate will fall within the posted range.

Description & Requirements

Press space or enter keys to toggle section visibility

About Xerox Holdings Corporation

For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we’ve expanded into software and services to sustainably power today’s workforce. From the office to industrial environments, our differentiated business solutions and financial services are designed to make every day work better for clients — no matter where that work is being done. Today, Xerox scientists and engineers are continuing our legacy of innovation with disruptive technologies in digital transformation, augmented reality, robotic process automation, additive manufacturing, Industrial Internet of Things and cleantech. Learn more at www.xerox.com and explore our commitment to diversity and inclusion. (https://www.xerox.com/en-us/jobs/diversity)

Chief Information Security Officer

Position Summary:

Reporting to the EVP, Chief Transformation & Administrative Officer, The Chief Information Security Officer (CISO) is responsible for developing and implementing an information security program that includes procedures and policies designed to protect enterprise communications, systems, and assets from both internal and external threats. The CISO will oversee the organization’s information security strategy, manage a team of security professionals, and ensure compliance with relevant laws and regulations.

The ideal candidate will possess deep technical expertise in the field of Information Security with a successful history of delivering Enterprise-wide security programs.

Primary Responsibilities:

• Develop and execute a comprehensive information security strategy aligned with the company’s business objectives.

• Establish, implement, and maintain information security policies, standards, and procedures.

• Identify and ensure compliance with various laws and regulatory requirements.

• Coordinate and lead response to information security incidents to mitigate the impact and ensure timely resolution and communication.

• Select and implement information security threat mitigation strategies and safeguards.

• Perform periodic information security-related risk analyses, prioritize risks, and implement effective risk mitigation processes to protect the enterprise information assets.

• Develop and maintain KRI’s and provide regular updates to executive leadership, board, and relevant enterprise risk committees on information security program status.

• Develop and implement enterprise security architecture that aligns with company’s IT and business strategy, oversee implementation of security technologies and infrastructure.

• Develop and maintain enterprise secure software development lifecycle process, ensure compliance of products, services, and IT applications.

• Develop and conduct security awareness programs for employee, promote a culture of security awareness across the organization.

• Manage and mentor a diverse team of security professionals and foster a collaborative and high-performance environment.

Qualifications (Knowledge, Skills & Abilities)

The finalist candidate will be an experienced Chief Information Security Officer (current or prior) who possess deep technical expertise in the field of Information Security with a successful history of delivering Enterprise-wide security programs.

• 15+ years of experience in information security including at least 3+ years experience as a Chief Information Security Officer; with at least 5 years management experience

• Current or Prior experience as the CISO in a publicly traded company.

• Preferred certifications: CRISC, CISA, CISM, CISSP or similar

• Understanding of relevant legal, regulatory and privacy requirements such PCI DSS, ISO 27001, SOC2, FEDRAMP, CMMC etc.

• In-depth knowledge of various information security frameworks, standards, methodologies, and best practices (e.g., NIST, ISO, SANS, OWASP).

• Strong understanding of security technologies, trends, and best practices.

• Ability to manage multiple projects and initiatives in a fast-paced environment. Proven track record of developing and implementing successful information security programs.

• Strong security architecture background with experience building and driving a cybersecurity strategy and framework, with initiatives to secure the organization's cyber and technology assets.

• Proven track record of developing and implementing secure processes and systems used to prevent, detect, mitigate, and recover from cyberattacks with strong exposure to various technology-based safeguards.

• Strong understanding of information security principles, practices, and technologies, including network security, application security, cloud security and endpoint security.

• Excellent leadership, communication, and interpersonal skills.

• Effective organizational, time management and interpersonal skills: Analytical mindset with creative and innovative problem-solving skills, Ability to adapt to change and embrace ambiguity, Excellent verbal & written communication skills.

• Bachelors or Masters degree in Computer Science, Information Technology, Cybersecurity or related field of study

Location: Virtual (with a preference for on-site in our Cary, NC office)

Xerox is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, sex, marital status, sexual orientation, physical or mental disability, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law. Learn more at www.xerox.com and explore our commitment to diversity and inclusion: https://www.xerox.com/en-us/jobs/diversity People with disabilities who need a reasonable accommodation to apply or compete for employment with Xerox may request such accommodation(s) by sending an e-mail to XeroxStaffingAdminCenter@xerox.com. Be sure to include your name, the job you are interested in, and the accommodation you are seeking.