Director, Cybersecurity

Overview

Shift4 (NYSE: FOUR) is boldly redefining commerce by simplifying complex payments ecosystems across the world. As the leader in commerce-enabling technology, Shift4 powers billions of transactions annually for hundreds of thousands of businesses in virtually every industry. For more information, visit www.shift4.com.

Responsibilities

• Develop, implement and operationalize product and service security strategy
• Govern and enforce the effective implementation of product security practices
• Design, implement and manage a scalable platform of product security services
• Promote secure practices with stakeholders to pragmatically bring new products and enhancements to market
• Develop and maintain an effective cybersecurity program including the formation of a security operations team to monitor and manage security risks and threats
• Develop roadmaps for cybersecurity, compliance and data privacy goals; define security strategies, metrics, reporting mechanisms and program services; and create maturity models and a roadmap for continual program improvements
• Review effectiveness of existing products and solutions, consolidate or standardize tools to manage complexity and control costs
• Work with infrastructure, operations teams, Risk, Legal and other teams to establish appropriate monitoring of threat activity
• Coordinate response to product security incidents
• Use analytics and metrics to define expected outcomes, measure performance and continually improve security effectiveness
• Collaboration with leadership peers to define and enable comprehensive strategies to drive innovation and market success
• Maintain enterprise security and compliance policies, documentation and checklists

Qualifications

• 8 years security experience; preferably in securing new products and platforms; with at least six years in a significant leadership role
• 5 years managing people with a proven track record of building, training, and developing a high-performing team; ability to lead and motivate an organization of security professionals to achieve tactical and strategic goals
• A thorough understanding of industry best practices in information security
• Experience assessing a wide array of digital and cloud products to meet regulatory, legal and risk requirements
• Experience working on cross-functional teams including engineering, products teams, legal and security
• Experience performing risk and threat assessments as part of product and platform development
• Exceptional soft skills, and ability to lead, inspire, and explain
• Extensive exposure and experience with communicating and presenting to executive stakeholders including engineering, legal and C-suites
• Extensive experience with agile methodology development
• 8 years of experience with leading information security frameworks or compliance initiatives such as ITIL, ISO27001/2, NIST 800-53, NIST CSF, FedRamp, FISMA, PCI, SOX, GLBA, OCC
• Experience effectively prioritizing work, managing competing priorities and meeting deadlines in a fast-paced environment
• Strategic thinker with proven roadmap management and evolution experience from planning to delivery
• Detail-oriented and have an analytical nature
• Bachelor’s degree or an equivalent combination of education and experience

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class.