Job Description

Job Descriptions

Job Summary

Responsible for managing and overseeing the Information Security department policies, standards and practices implemented across the Company. Develops initiatives, security strategies, key goals and activities integrating policies and guidelines. Defines Information Security risk management methodologies and processes. Collaborates extensively with the Information Technology leaders and other related functions to ensure implementation of standards for appropriate security checkpoints and encryption methods. Provides leadership and direction for team which may include multiple functional areas. Develops and implements strategy for functional area(s). May have responsibility for developing and managing budget.

Job Description

Who we are...

Blockgraph, a new joint venture startup focused on ushering in a new way of using audience data for advertising, is hiring a Director of Security & Compliance in New York City.

Blockgraph is a decentralized identity and insights platform built using distributed systems and blockchain technology. We have been featured in Business Insider, AdWeek, AdExchanger, and CoinTelegraph among others.

We are working with the biggest names in media, TV and advertising and are only getting started.

Why work for Blockgraph?

* First Ad-Tech Peer to Peer Enterprise network-Security and Privacy at the core of platform design
* First open audience platform to share/use data across all media channels
* Platform as a service (PaaS) model-Distributed and microservice architecture
* Fast paced startup culture lead by media giants
* Exposure to advanced cryptography and algorithms

About the Role:

The Director of Security & Compliance is a leadership role within Blockgraph and responsible for helping formulate and establish the security strategy, standards and direction. The person will be responsible for not only Blockgraphs cloud infrastructure, but also for the integration of security technology and security practices into a fast-paced engineering and devops organization to provide protection across the platform. This is a technical role, providing leadership for application security and operations engineers focused on a Secure by Design development model and workflow.

Key Responsibilities

1.Lead the security org and own the Information Security process and policy

2.Ownthe roadmap for security strategy and manage the implementation

3.Project Manage security and privacy related implementation across the Org

4.Ensure regulatory compliance with security requirements for all of our customers

5.Engage with customers and vendors and be the point person for security audits and other services

6.Be the point person to handle security incidents

7.Work with technical team and operations team to identify security tools and vendors

8.Advocate security best practices and help identify training needs across organization

9.Conduct internal audits, compliance checks and run tools/scans on a regular basis

10.Be the point person to review and respond to security questions from customers and legal teams

Requirements for the position

Prior experience as a security leader at a similar level in a growth technology company

Minimum 6+years of experience as an Information Security leader in a consumer-technology, platform or enterprise software company

Technical foundation (Bachelor's, Master's in Computer Science or another STEM degree e.g. Math/Physics/Electrical Engineering etc.)

Having a business mindset and an innate ability to translate technical vulnerabilities into broader organizational risks

Relevant experience across modern engineering/product teams or within technology organizations. Cloud security and DevSecOps expertise highly relevant

Proven track record implementing the following programs: incident response, threat intelligence, DR/BCP, IAM, information privacy, SOC management, cloud security architecture(s), container based security and orchestration, security policy/advocacy and third-party risk assessments

Knowledge of current frameworks, standards and regulations such as SOC2, NIST, GDPR, CCPA

Experience working with Software / Infrastructure / Platform-as-a-Service solutions and architectures. Specific experience in AWS cloud security a plus

Superior written and verbal communication skills. Ability to serve broadly as a security advocate and authorityOtherRequirements

Vision for security matched by execution ability.

Comfortable working in a start-up culture

Views security as an enabler, not an inhibitor to innovation.

Values team work, humble and hardworking

Utmost integrity dealing with sensitive security and privacy issues

Forward-thinking and able to flex between technical detail and company strategy

Employees at all levels are expected to:

* Understand our Operating Principles; make them the guidelines for how you do your job.
* Own the customer experience - think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services.
* Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences.
* Win as a team - make big things happen by working together and being open to new ideas.
* Be an active part of the Net Promoter System - a way of working that brings more employee and customer feedback into the company - by joining huddles, making call backs and helping us elevate opportunities to do better for our customers.
* Drive results and growth.
* Respect and promote inclusion & diversity.
* Do what's right for each other, our customers, investors and our communities.

Education

Bachelor's Degree

Relevant Work Experience

10 Years +