The Vice President and Chief Information Security Officer's role is to provide vision and leadership for developing and supporting security initiatives and governance of all subsidiaries and joint ventures of Encore Capital Group. This role is responsible for establishing and maintaining a global enterprise-wide information security management program and systems to ensure that information assets are adequately protected. This position is responsible for identifying, evaluating, and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the enterprise.
The Chief Information Security Officer provides input and guidance on the planning and implementation of enterprise IT systems, business operations, and facility defenses to mitigate security breaches and vulnerability issues based on knowledge of both internal and external environments. This individual is also responsible for identifying issues and risks in existing systems, while directing the administration of security policies, activities, and standards. This role is an integrator of people, process, and technology.
This role's key stakeholders are the two BU President's, Global and Cabot CIOs, VP Internal Audit, Chief Strategy, Risk and Compliance officer, and the three senior General Counsel's for Encore, MCM and Cabot.
This role will present to the Board on a Quarterly basis. They will lead a team of thirty employees across UK, IE, EU, and US and India.
Evidence of success in this role will be the successful implementation of an InfoSec Roadmap and Strategy, NIST CSF alignment, and developing and leading a strong InfoSec team across the globe, wherein they have as a leader-built trust both internally, with the board and senior leaders regarding the InfoSec program. This role is influential internally and a strong technical leader of InfoSec frameworks and knowledge.
- Build the network and communicate the vision: Lead and communicate strategic security plans to achieve business goals by prioritizing defense initiatives and coordinating the evaluation, deployment, and management of current and future security technologies using a risk-based assessment methodology. Provides clear risk mitigating directives for projects and plans as it relates to IT projects and controls. Provides regular reporting on the status of the information security program to enterprise risk, senior business leaders and the board of Directors for Encore part of strategic enterprise risk program in order to drive assurance.
- Work closely with the IT department on corporate technology development to fully secure information, computer, network, and processing systems. Assist the IT organization and broader enterprise with maintaining compliance with such security frameworks as PCI DSS, ISO 27001, and SOX / COBIT. 30%
- Establish Governance and Build Knowledge: Own all assurance & information security governance activities related to the integrity and confidentiality of customer, business partner, employee, and business information in compliance with the organization's information security policies. Leverages the Infosec LT and other governance boards and steering committees to ensure compliance.
- Lead the organization: Develop, track, and control the security services annual operating and capital budgets for purchasing, staffing, and operations. Communicate security strategies and plans to executive team, staff, partners, customers, and stakeholders.
- Promote and oversee strategic security relationships between internal resources and external entities, including government, vendors, and partner organizations.
- Operate the function: Report security performance against established security metrics and key risk indicators. This includes managing and containing information security incidents and events to protect corporate IT assets, intellectual property, regulated data, and the company's reputation.
- Develop the Frameworks: Recommend and implement changes in security policies and practices and training in accordance with changes in local or federal law. Maintain and oversee enforcement of these policies and practices.
- Perform other duties, as assigned.
EDUCATION: Bachelor's FIELD OF STUDY: Information Security/Technology or equivalent experience
EXPERIENCE: Must have 15+ years of experience in a combination of risk management, information security and senior IT roles, managing and/or directing an IT and/or security operation. At least four must be in an executive leadership role. Experience in planning, organizing, and developing IT security.
CERTIFICATION(S): The ideal candidate will be certified or seeking the following professional certifications: CISA, CISM, CISSP, CEH, or additional technical security certifications.
KNOWLEDGE, SKILLS, ABILITIES, AND OTHER ATTRIBUTES:
- Experience in planning and executing security policies and standards development.
- Excellent knowledge of technology environments, including information security and defense solutions.
- Considerable knowledge of business theory, business processes, management, budgeting, and business office operations.
- In-depth knowledge of applicable laws and regulations as they relate to security.
- Ability to champion culture within the IT risk management and compliance teams.
- Ability to connect with others on a personal level while remaining sensitive to individual differences to influence others' and inspire their support.
- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
- Strong presentation skills to executive audiences.
EDUCATION: Bachelor's FIELD OF STUDY: IT/InfoSec
EXPERIENCE: CISO experience, prior experience in role
CERTIFICATION(S): CISSP, CISM, CRISC
KNOWLEDGE, SKILLS, ABILITIES, AND OTHER ATTRIBUTES:
- Poise and ability to act calmly and competently in high-pressure, high stress situations.
- High degree of initiative and decision making.
- High level of personal integrity, as well as the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity.
- Has good judgment, a sense of urgency and has demonstrated commitment to high standards of ethics, regulatory compliance, customer service and business integrity.
- A critical thinker and analytical person.
Starting Compensation
Annual Salary: $254,100.00 - $330,000.00 (Amount based on office location, relevant experience, skills, and competencies)
If you are wondering why you should work for us, here is something to help you decide:
Pay and Bonuses: Earn a competitive salary. All employees are eligible for monthly incentives or annual bonus.
Career Progression: Grow at MCM with paid training and development programs – including our very own MCM Academy – as well as a promote-from-within philosophy.
Reward and Recognition: We are committed to honoring great results – ranging from informal accolades to formal company-wide awards and prizes like all-inclusive vacations.
Tuition Assistance: Pursue a degree or coursework related to your current role, or the role you are striving for.
Healthcare Insurance: Take advantage of comprehensive healthcare plans and options to ensure your continued health, plus fitness membership reimbursements, weight watchers, our wellness rewards Program and more.
Volunteering Opportunities: Enjoy up to eight hours of paid time off each year to volunteer. We also offer volunteer grants and matching financial donations, up to US$ 2,500 per employee annually.
Retirement Savings: Build a strong financial foundation and reach your goals for the future. With all the effort you invest in us, we’re proud to invest in you.
New Family Support: Celebrate your new arrival with company paid leave, new parent flex time, and child back-up care options.
Team-building: Enjoy experiences that inspire bonds with your colleagues through a wide range of company-sponsored team-building events, such as holiday celebrations and department outings.
Work-Life Balance: Enjoy paid and floating holidays, as well as generous paid-time-off.
Our compensation and benefits programs were created with an 'Employee-First Approach' focused on supporting, developing, and recognizing YOU. We offer a wide array of wellness and mental health initiatives, support volunteerism, and environmental efforts, encourage employee education through leadership training, skill-building, and tuition reimbursements, and always strive to provide promotion opportunities from within.
About Us
Headquartered in the United States, Encore Capital Group (Encore) is a publicly traded international specialty finance company operating in various countries around the globe. Through our businesses - such as Midland Credit Management and Cabot Credit Management - we help consumers to restore their financial health as we further our Mission of creating pathways to economic freedom. Our commitment to building a positive workplace culture and a best-in-class employee experience have earned us accolades including Great Place to Work® certifications in many geographies where we operate. If you have a passion for helping others and thrive at a company that values innovation, inclusion and excellence, then Encore Capital Group is the right place for you.
Encore Capital Group and all of its subsidiaries are proud to be an equal opportunity employer and are committed to fostering an inclusive and welcoming environment where everyone feels they belong. We encourage candidates from all backgrounds to apply. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other status protected under applicable law. If you wish to discuss potential accommodations related to applying for employment, please contact [email protected].
