Director, Information Security & Compliance - Remote Opportunity

Company: KinderCare Education
Location: Tacoma
Posted on: September 7, 2021

Job Description:

Description:

The IT team at Kindercare creates digital experiences that help working parents stay informed on their child’s early education and so much more. Headquartered in Portland, Oregon, KinderCare operates more than 1,500 early learning centers and employs more than 32,000 team members. In 2021, KinderCare earned its fifth Gallup Exceptional Workplace Award – one of only four companies worldwide to win this award for five consecutive years. Our devoted family of education providers leads the nation in accreditation and includes KinderCare® Learning Centers, KinderCare Education at Work®, Champions® Before- and After-School Programs. We keep this team online and help parents be where their kids are, even from the office. 

Job Summary\:
KinderCare Education is looking for a Director, Information Security & Compliance to drive our security and compliance strategy.  
In this unique role, the information security leader will act as process owner for the development and implementation of an organization-wide information security program and ongoing activities to preserve the availability, integrity and confidentiality of the company’s information resources in compliance with applicable security policies and standards.  You will bring your leadership presence and security experience to oversee the implementation of the information security program, working closely with your business partners and stakeholders. 
This role leads two distinct functions at KinderCare and partners closely with external vendors, including KinderCare’s a Managed Security Service Provider.  The ideal candidate will have a deep security and compliance background and demonstrated experience influencing and driving change through an organization. This position is both strategic and tactical in nature. 

What you’ll do\:
•    Lead KinderCare and the InfoSec team in our evolution
•    Partner and influence all business groups in formulating policy and strategy for Information Security
•    Communicate and educate all levels of business leadership on the value and their role in IT Security to the company.
•    Develop and maintain IT security strategy, policies, procedures and guidelines as required ensuring changing enterprise needs are met.
•    Define high level security requirements across multiple disciplines of IT including applications, network and systems, new technologies. 
•    Regularly discover and assess security threats & risks that could reasonably be of impact to KCE and create strategic and tactical plans to mitigate those risks.  
•    Review and approve service provider’s security solutions and procedures as they apply to services being utilized by KCE as well as identification of unacceptable levels of supplier risk and hold those suppliers accountable to action plans to mitigate those risks.
•    Review incident reports for compliance with KCE policy and procedures and provide for modification of policies and procedures to address new security threats.
•    Coordinate development and end user training in accordance with KCE security policies and procedures.
•    Regularly review and approve project level security requirements and impacts, ensuring IT security best practices, policies and procedures are applied.
•    Conduct routine audits of KCE systems & processes to assess adherence of KCE’s systems to regulatory, compliance, and best practice standards requirements.  Collaborate cross functionally to ensure remediation plans are clear and meeting objectives.
•    Communicate in written and verbal forms to all levels of the organization on security issues and plans.
•    Incorporate ITIL best practices in the go forward plans and procedures for KCE security.
•    Coordinate responses for customer-initiated documentation requests, regarding KCE security policies, procedures and events.
 

•    7+ years of professional IT security and leadership experience with advanced knowledge of information security principles and processes including security risk assessment standards, risk assessment methodologies, and vulnerability assessment
•    Certified Information Systems Security Professional (CISSP) is preferred.
•    Certified Information Systems Auditor (CISA) and Certified Information Security Manager preferred.
•    Demonstrated cross functional partnership experience in implementing security initiatives 
•    In-depth knowledge of IT security and compliance practices and procedures for enterprise environments including, but not limited to, mobile devices, cloud services, enterprise applications, data centers and networks.
•    Excellent written and verbal communication skills.
•    Demonstrated ability to build relationships with direct team, business partners, suppliers, and technology stakeholders.
 

KinderCare Education employs more than 32,000 team members across 1,700 locations nationwide. Our devoted family of education providers leads the nation in accreditation and includes KinderCare® Learning Centers, KinderCare Education at Work®, Champions® Before- and After-School Programs, Cambridge Schools™, Knowledge Beginnings® and The Grove School®.

KinderCare Education is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, national origin, age, sex, religion, disability, sexual orientation, marital status, military or veteran status, gender identity or expression, or any other basis protected by local, state, or federal law.

Keywords: KinderCare Education, Tacoma , Director, Information Security & Compliance - Remote Opportunity, Other , Tacoma, Washington