Information Security Officer

Job Description:

As an Information Security Officer, you will develop and enforce security policies to protect systems and data for portfolio companies and clients. This remote or New York, NY-based role (with access to a WeWork office) offers the opportunity to work with global teams, enabling you to lead information security initiatives, ensure compliance with regulations, and mitigate risks. You will play a key role in maintaining the security and integrity of the organization’s digital environment.

Job Responsibilities:

• Develop, implement, and enforce information security policies and procedures.
• Conduct risk assessments and audits to identify and mitigate security vulnerabilities.
• Ensure compliance with regulatory requirements and industry standards (e.g., GDPR, ISO 27001).
• Monitor and respond to security incidents, providing timely resolutions.
• Collaborate with internal teams to integrate security measures into systems and applications.
• Stay updated on emerging cybersecurity threats and technologies, recommending improvements to existing systems.
• Provide training and guidance to employees on security protocols and best practices.
• Prepare and present security reports to senior management and stakeholders.

Job Requirements:

• Education: Bachelor’s degree in Cybersecurity, Information Technology, or a related field; equivalent experience accepted.
• Experience: 5+ years of experience in information security or a related role (open to less experienced candidates with strong potential).
• Skills:
  • Strong knowledge of security principles, protocols, and technologies.
  • Proficiency in security tools and software (e.g., SIEM, firewalls, antivirus).
  • Experience with risk management and compliance frameworks (e.g., NIST, ISO 27001).
  • Excellent analytical and problem-solving abilities.
  • Ability to manage multiple tasks and meet deadlines in a fast-paced environment.
  • Strong communication and collaboration skills.
• Certifications: Relevant certifications (e.g., CISSP, CISM, CISA) are required.