Technical Architect InfoSec

Job Title: Technical Architect Security

Location: Work From Home

Department: Security 

Reports to: Associate Director - Technology

Job Type: Full-Time

Website: https://deliverysolutions.co/

Delivery Solutions is a Retail eCommerce OXM Platform that provides retailers with out-of-the-box solutions to power Same-Day Delivery, Curbside, In-Store Pickup, Shipping, and post-purchase experiences. We are trusted with some of the biggest names in multiple verticals of retail like Sephora, AT&T, Footlocker, Michael's, Office Depot, GameStop, Total Wine, Sally Beauty, Abercrombie & Fitch Co. Belk, Loblaw, Vineyard Vines etc.

Our SAAS-based solution is highly flexible and interacts seamlessly with E-commerce properties, OMS, WMS, and POS systems for a highly scalable experience and a delighted customer base.

Delivery Solutions is a wholly-owned subsidiary of UPS | We are a certified Great Places To Work Company

Job Overview: As a Technical Architect of security, you will be responsible for leading and managing our Information Security Operations team. You will safeguard our organization's information assets by developing, implementing, and maintaining security processes and protocols. Ensure compliance with relevant laws, regulations, and industry standards (e.g., ISO, SOC2, HIPAA, GDPR) i.e. monitor changes in compliance regulations, adjust policies and procedures as necessary, and oversee the development and implementation of privacy policies and procedures to protect personal data. This role demands a blend of technical expertise and leadership skills to ensure the security and integrity of our systems, networks, and data.

Key Responsibilities:

Technical Responsibilities:

Policy Development and Enforcement

• Develop, implement, and enforce comprehensive security and privacy policies.
• Regularly review and update policies to reflect evolving threats and regulatory requirements.
• Audit adherence to these policies across the organization

Security Operations Centre:

• Oversee the daily operations of the information security team, ensuring that all security policies, procedures, and protocols are effectively implemented and maintained.
• Lead the development and implementation of security measures, including firewalls, intrusion detection systems, and encryption protocols.

Incident Response:

• Manage and respond to security incidents, providing timely and effective resolution.
• Conduct thorough investigations of security breaches and take appropriate corrective actions.

Vulnerability Management:

• Conduct regular security assessments and vulnerability scans to identify potential threats.
• Recommend remediation strategies to address identified vulnerabilities.

Compliance and Audits:

• Develop policies based on industry best practices and implement the policies defined.
• Ensure compliance with relevant laws, regulations, and industry standards (e.g., ISO, SOC2, HIPAA, GDPR).
• Coordinate and support internal and external security audits.

Privacy:

• Be updated on the privacy laws where the company and customers operate
• Ensure the company’s processing activities comply with privacy laws

Functional Responsibilities:

Strategic Planning and Development:

• Collaborate with senior management to develop and implement the overall information security strategy.
• Identify and prioritize security initiatives and projects based on risk assessment and business impact.

Team Leadership and Development:

• Resource management, planning and execution, and stakeholder communication.
• Planning execution of various projects in the domain of security and privacy
• Lead, mentor, and develop a team of security professionals, fostering a culture of continuous improvement and professional growth.
• Conduct performance evaluations and provide constructive feedback to team members.

Cross-Department Collaboration:

• Work closely with IT, legal, marketing, and other departments to ensure cohesive security practices across the organization.
• Serve as a key advisor to the Associate Directors and other executives on security and privacy matters.
• Coordination and provide updates to Delivery Solutions' parent organization on security initiatives.

Risk Management:

• Identify, assess, and mitigate information security risks.
• Develop and maintain a risk management program that aligns with the organization’s objectives.

Security Awareness and Training:

• Develop and deliver security awareness training programs to educate employees on security best practices and emerging threats.
• Promote a security-conscious culture throughout the organization.

Qualifications:

• Education: Bachelor’s degree in Computer Science, Information Security, or a related field. Master’s degree or professional certifications (CISSP, CISM, etc.) preferred.
• Experience: Minimum of 7-10 years of experience in information security, governance, and audit processes, with at least 3-5 years in a management or leadership role. Have worked as an auditor for ISO / SOC2 and other frameworks
• Technical Skills: Experience in setting up a framework and conducting privacy and security audits.Conducting training and awareness, proficiency in security technologies and tools (e.g., SIEM, IDS/IPS, firewalls, endpoint protection), strong understanding of network security, cryptography, and risk management frameworks.
• Functional Skills: Strong leadership and team management skills, excellent communication and interpersonal abilities, experience in strategic planning and project management.
• Personal Attributes: Strong analytical and problem-solving skills, high ethical standards, ability to work under pressure and manage multiple priorities.