Information Security Officer

Dakota Supply Group (DSG) is seeking an Information Security Officer. This will be a full-time, salary position with most work being performed during regular business hours, Monday through Friday. As a member of the DSG’s IT leadership team and under the direction of the CIO, the role of the Information Security Officer (ISO) is responsible for establishing and overseeing the company’s security strategy and security initiatives by balancing security and compliance needs with the organization’s strategy.

The ISO role will provide critical insight and assistance in the creation, administration, and review of the company’s security strategy. Additional responsibilities of the ISO include but are not limited to review and establishment of IT security related controls, policies and procedures, oversight of the execution and effectiveness of those controls, policies and procedures, ownership of IT risk management, ownership of PCI compliance, security and awareness training and IT related incident management.

This role must be able to provide both strategic direction and operational leadership. Additionally, the ISO must possess the ability to manage vendor relations, provide leadership to staff and peers and create/manage budgets. A wide degree of creativity and latitude is expected.

Since our founding in 1898—with roots dating back to 1868, DSG has been dedicated to providing all the right connections to our customers in the electrical; plumbing; HVAC; refrigeration; communications; utility; automation; waterworks; on-site sewer, water and well; filtration and metering technology industries. We carry more than 65,000 products from the top brands, but that’s only the beginning. Our experienced team of specialists provide customers with solutions that help them to maximize their employees’ productivity and increase their company’s profitability. Plus, DSG is an employee-owned (ESOP) organization. That means you are always working with an owner, and consequently, your success is recognized as the foundation of our own.

Specific Duties of the Information Security Officer:

• Assist with strategic and technical planning, development, evaluation and coordination of the information, communication, technology systems and security to support the implementation of strategies set by company leaders.
• Oversight of IT risk assessment, delegation, progress reporting and mitigation controls.
• With the assistance and support of the CIO, oversight of the companies PCI Compliance program.
• Responsible for planning, testing and acting on all IT related incident response matters.
• With the assistance of the Learning and Development team, create and oversee the training and educational program and requirements related to IT security.
• Establish the IT policies, standards, practices and security measures to ensure effective and consistent information processing operations and to safeguard information resources without hindering business operations.
• Participate in the selection, deployment, testing and maintenance of security related technologies and tools in addition to third party engagements.
• Provide guidance to the organization for all technology security related matters.
• Consult with business units to document business needs and objectives, current operational procedures and problems.
• Assists with the creation and oversight of a disaster recovery (DR) and business continuity (BC) plan including but not limited to: design, implementation, documentation, testing and communication.
• Facilitate communication between employees, leadership, vendors and other technology resources within the company to meet security needs.
• Vendor management and oversight.
• Deliver and demonstrate exceptional customer service.
• Perform additional responsibilities as needed.

Qualifications for the Information Security Officer:

• Bachelor's degree in IT or a related field, or equivalent experience.
• Minimum of eight years of experience in IT, including five years in ISO or related role.
• Experience in the wholesale/distribution industry a plus.
• Ability to analyze data and report on key metrics related to IT security.
• Strong business acumen and an understanding of how the industry operates, partnered with attention to the information system and technology element.
• Knowledge of information systems policies and procedures, computer science concepts, windows-based applications, client/server architecture, networking and security.
• Strong analytical and documentation skills.
• Ability to exercise leadership skills, initiative, judgment, and decision-making.
• Ability to establish and maintain effective working relationships with customers, information technology staff, vendors and professional contacts.
• Ability to communicate clearly and to maintain strict confidentiality.
• Proven ability to make difficult decisions to meet company goals and follow through and follow up as needed.
• Outstanding verbal and written communication skills.
• Multi-tasking and prioritizing skills needed to manage projects and meet tight deadlines.
• Diligent and firm with high ethical standards

Benefits Available:

• Medical, Dental, & Vision Insurance
• Health Savings Account (HSA), with employer contribution
• 401(k) Retirement Savings Plan, with employer match
• Employee Stock Ownership Plan (ESOP)
• Dependent Care FSA
• Short and Long Term Disability Insurance
• Life, Accident and Critical Illness Insurance
• Comprehensive Wellness Program
• Teledoc, a virtual telehealth benefit
• Referral Bonus
• Generous PTO Allowance & Extended Medical Leave
• Volunteer hours
• Length of Service awards
• Employee discounts on DSG supplied products!
• Personal and professional development opportunities
• And more!