Director Of Security Governance (Mérida)

Overview

About this opportunity: Location expectations – This role is a hybrid position with the preferred location being Plano, Texas or Boise, Idaho; relocation is not offered for this position.

BEWS Security is responsible for end-to-end security matters within the Business Area (Enterprise and Product Security). Our role is to ensure that the Ericsson Security Strategy and Integral guidelines are in place and aligned with the new business under responsibility of Ericsson Enterprise Wireless Solutions. This team is focused on security governance and risk management across the enterprise.

Responsibilities

• The Director of Security Governance will manage a team whose responsibilities encompass: the security certifications and attestations necessary to support the enterprise business, information security management (part of Ericsson ISMS), local security, steering documents (part of Ericsson Global Security Steering documents), third party security risk management, information/IT security risks, and security awareness.
• Support the strength of security within the Business Area by maintaining a collaborative, hands-on, positive mindset.
• Engage in initiatives including implementation of ways of working, support ongoing projects (e.g., ISMS) and support the business by answering questions, proposing awareness activities, and identifying new ways of working when applicable.
• Manage a high-performing team, remove roadblocks, and guide them to the correct initiatives.
• Work in partnership with other departments such as IT, Product, Legal and other support functions within the organization.
• Be part of Ericsson’s growth path in Enterprise Security with learning opportunities and personal development.

The skills you bring

• Bachelor's degree in information technology, Cybersecurity, or related field.
• Experience in Information, IT and Cyber Security frameworks and implementation best practices.
• Solid experience in coordinating security frameworks like NIST, ISO and the interconnection of these frameworks with country regulations (US, EU and Asia).
• Solid experience with management of attestations (e.g., SOC 2, IRAP) and certifications (e.g., PCI).
• Strong background in implementing new technologies, security frameworks, and DevSecOps practices.
• Experience in Third-Party & Supplier Cybersecurity Assurance, including Software Development Security, risk management, and security posture assessments.
• Evaluates key business challenges and directs the development of new or innovative solutions.
• Proven experience in designing and implementing security assurance over network/cloud infrastructures and developing security architecture standards.
• Advanced skills in security metrics, measurements, and reports.
• Relevant certifications such as CISA, CISM, CISSP and other security qualifications.
• Strong leadership skills and experience with high-performance teams.
• Strong analytical and problem-solving skills; excellent communication and collaboration abilities, including the ability to persuade leaders to act in accordance with the approved Security Strategy and Tactical plans.

Application deadline: January 10, ****

What happens once you apply?

Click Here to find all you need to know about what our typical hiring process looks like.

Disclaimer: The above statements are intended to describe the general nature and level of work being performed by employees in this position. They are not an exhaustive list of all responsibilities, duties and skills required for this position, and you may be required to perform additional tasks as assigned.

Primary country and city: United States (US) || Boise (ID)

Job details: Security Management