Director, Global Security Operations

at DigiCert
Lehi or US Remote
ABOUT DIGICERT
We’re a leading, global security authority that’s disrupting our own category. Our encryption is trusted by the major ecommerce brands, the world’s largest companies, the major cloud providers, entire country financial systems, entire internets of things and even down to little things like surgically embedded pacemakers. We help companies put trust—an abstract idea—to work. That’s digital trust for the real world.
POSITION
Director of Global Security Operations
JOB DESCRIPTION
The Director of Global Security Operations will help advance the security operations of DigiCert by identifying and remediating potential risks, threats, and vulnerabilities by leading the Global Security Operations team. The Director of Global Security Operations will work with different functions (e.g. IT, engineering, compliance) on various projects to support security and compliance requirements, goals, and expectations. The Director of Global Security Operations will be responsible for helping to maintain and improve DigiCert’s security posture and hygiene at all levels.
RESPONSIBILITIES
Manage security programs and supervise security personnel
Provide leadership, guidance and training to Global Security Operations personnel
Lead up Security Incident Response, analysis of incidents, and direct responses to resolve incidents
Lead Vulnerability Management
Manage endpoint protection architecture
Manage Security Operations Center architecture, processes and procedures
Manage physical security projects (office security, secure locations)
Perform security reviews against organization’s security measures, identify gaps in security architecture
Update and define baseline security requirements in accordance with security and compliance requirements
Ongoing analysis of SIEM and help improve SIEM workflows and alerting
Provide audit support and work with DigiCert’s Compliance teams
Provide direct support to DigiCert’s Data Privacy Officer and Legal Team
Direct and mature Security Awareness Training for company employees
Provide ongoing status and track work relating to security projects and various tasks to Director of Global Security Operations
Direct the configuration, management, and maintenance of various security related software and systems
Ensure fulfillment of legal, contractual obligations and privacy mandates
Self-sufficient/self-motivated when assigned solo work
Willingness to stay current on emerging threats, vulnerabilities, etc to help protect DigiCert’s systems
Provide analysis of, and potential solutions to, identified Security, IT, Engineering/Development related threats, and problems.
Other duties and responsibilities as assigned
QUALIFICATIONS
10+ years of experience in Information Security, Physical Security and IT Compliance
Bachelor’s degree in computer science, or related field or equivalent experience
Extensive knowledge of security program design concepts and principles
Willingness and ability to obtain CISSP or CISA certification if not already completed
Excellent interpersonal and leadership abilities
Excellent communication and presentation skills
PREFERRED QUALIFCATIONS & EXPERIENCE
Master’s degree with an information security focus
Minimum of 10+ years of experience in Information Security
Minimum of 5+ years of experience with SIEM technologies (preferably Splunk)
Minimum of 5+ years experience with cloud-based identity providers, SSO, SAML, etc
Minimum of 5+ years experience with web application security technologies (BURP, Metasploit, etc)
Minimum of 5+ years experience with vulnerability management software (preferably Tenable)
Minimum of 5+ years experience with scripting languages (Python, Go, PHP, Powershell, Bash, etc)
Minimum of 5+ years experience with endpoint protection software and methodologies
Minimum of 5+ years experience with CCTV and access control systems
Designed, built, and implemented enterprise-class security systems
Develop and integrate security designs for systems and networks while meeting security and compliance requirements for multiple security, compliance and privacy frameworks (e.g. ISO, NIST, GDPR, CCPA, PCI-DSS)
Certified Information Security Professional (CISSP) OR
Certified Information Systems Auditor (CISA)
BENEFITS
Unlimited paid time off
Top shelf benefits
Education, wellness and lifestyle support
To learn about our culture please visit - > https://www.linkedin.com/company/digicert-inc-/life/culture/?viewAsMember=true