Director of Cyber Security

Job description

At EZCORP we are a growing team focused on creating and changing the pawn industry as we know it today. We believe that our platform enabled lending and e-commerce solutions will revolutionize our ability to attract, engage and service our customers across the United States, Mexico and Latin America. Join us now for an opportunity to be a part of a team that wants to provide access to short-term cash for every person – everywhere! The Company: Founded in Austin in 1989, EZCORP has grown into a leading provider of pawn loans in the United States, Mexico and Latin America. We are dedicated to satisfying the short-term cash needs of consumers who are both cash and credit constrained and providing an industry-leading customer experience. What’s in it for you: Ground Floor opportunity with EZCORP, a company with a start-up, purpose-driven mentality where innovative and agile problem solving are part of our DNA along with competitive compensation and benefits. Address: Texas The Director of Cyber Security is a senior leader responsible for establishing and maintaining the enterprise cybersecurity vision, strategy, culture, and program established by the CISO to protect information assets and technologies. This person directs the planning and implementation of enterprise cybersecurity measures and practices on IT infrastructure, systems, data, application development, and business operations while overseeing the development of policies and procedures to safeguard the organization's sensitive information. This position reports to the CISO. Key Areas of Responsibility Directing the successful execution of the multiyear Cyber Roadmap Administer the information security function's strategy, operations, and budget. Partnering with key leaders across the organization to advance the goals of the business and Cyber Security Function Critical and Essential Tasks Develops strategic and tactical roadmaps to strengthen information and cyber security technologies, services, policies, standards, and procedures to implement effective risk mitigation strategies and controls. Conduct regular security assessments and audits to identify potential security risks and vulnerabilities and develop mitigation strategies. Collaborate with IT Leadership, executive management, and other stakeholders to ensure alignment of security initiatives with business goals and objectives. Collaborate with the IT teams and other stakeholders to develop and maintain a robust enterprise incident response plan. Design and implement a robust security architecture for IT systems, networks, and applications, incorporating the latest security technologies and methodologies. Lead and actively manage security-related projects such as assessments, audits, penetration tests, and remediation efforts. Contribute to IT infrastructure projects and activities that are tangential to information and cyber security. Develop, implement, and update the enterprise security policies, standards, and procedures, as well as other cyber security-related policies, including those pertaining to systems access, authentication, acceptable use, and the use of artificial intelligence. Oversee the monitoring, analysis, and mitigation of security incidents/breaches and resulting impact to the business. Collaborate with system owners and administrators to ensure that new or updated solutions and services comply with the enterprise cyber security standards. Oversee security assessments, audits, penetration testing and vulnerability scans to identify vulnerabilities/risks and ensure ongoing security improvement. Evaluate third-party vendors and service providers for security compliance and ensure that security requirements are met in vendor contracts. Develop security training and awareness programs in conjunction with the IT Compliance Teams for employees, promoting a culture of security awareness and compliance across the enterprise. Define Cyber Security KPIs and risk indicators and prepare regular updates Stay updated on current and emerging security technologies, trends, and threats. Integrate relevant/appropriate leading security technologies and practices into the enterprise's security architecture. Lead and manage the information security team, including hiring, training, and performance management. Develop and manage the information security budget to ensure that resources are allocated effectively to address security needs. Requirements Experience 10+ years of experience in a leadership role in the areas of IT security, risk, and compliance Education Security certification (CISSP) and Audit training preferred