As a leading provider of Talent Activation/Human Resources software, information security is critical to SilkRoad’s success.  The Director of Information Security is responsible for the definition, implementation and maintenance of SilkRoad’s internal and external security policies. Deep knowledge of SOC compliance is required for this role as well as experience with security audits and software penetration testing.  You will have an impact across the company as you ensure that internal security policies are properly defined, staff is properly trained and policies are followed.  Additionally you will be the primary liaison representing our security policies and procedures to our customer base.  This is a high-visibility role reporting directly to the Vice President of R&D.

All employees of SilkRoad are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position.  We rely on our employees to be thinkers not just doers. 

Responsibilities:

• Serve as an internal information security consultant to the organization. 
• Responsible for the definition and documentation of corporate security policies and procedures.
• Ensure that all all employees, contractors, alliances, or other third parties are properly trained in corporate security policies.
• Ensure that all employees, contractors, alliances, or other third parties have appropriate information security clearance in accordance with established organizational information security policies and procedures. 
• Initiate, facilitate, and promote activities to create information security awareness within the organization.
• Perform information security risk assessments and serves as an internal auditor for security issues. 
• Serve as the security liaison for sales, marketing, development and engineering as new projects and products are implemented. 
• Implement information security policies and procedures for the organization.
• Review all system-related security plans throughout the organization's network, acting as a liaison to Information Systems.
• Monitor compliance with information security policies and procedures, referring problems to the appropriate department manager.
• Coordinate the activities of the Information Security Committee. 
• Advise the organization with current information about information security technologies and related regulatory issues.
• Monitor the internal control systems to ensure that appropriate access levels are maintained. 

• Superior communications skill (verbal and written).
• Proven ability to create and maintain effective documentation, including policies, processes and procedures.
• Previous experience leading a small team of professionals.
• Ability to lead a small team of professionals.
• Excellent organization skills.

• Bachelor's Degree in a related field is required.
• Previous experience defining and maintaining policies and procedures related to SOC compliance.
• Demonstrable experience directing technical projects related to information security and compliance.
• CISSP Certification preferred