Director, Compliance & Security - Kobie
St. Petersburg, FL
About the Job
Why you will love working for a National Top Workplace
We are a global leader in loyalty marketing
We work with some of the most well-known brands in the world to deliver market-leading, end-to-end loyalty solutions to enable customer experiences. With a strategy-led, technology-enabled approach, we are consistently named an industry leader by Forrester. The impact of these loyalty programs affords us deep brand partnerships, owning a niche in the loyalty space where outcomes matter most.
We are a mission and values driven company
Our mission is to grow enterprise value through loyalty for our clients. Every role within Kobie has a purpose and directly contributes to us achieving this mission.
We are values driven at every point. Over our 30+ year journey, we've created a fun, high-trust, transparent workplace. We believe in leadership and ownership. Our hybrid work environment, personal holidays, casual dress code and focus on diversity and inclusion add to a culture that makes our teammates proud. That pride shines through in the work we do for our clients.
About the team and what we'll build together
In this role you are the primary coordinator of annual PCI and SOC audits, and periodic client audits. You will partner and collaborate with business and technology teams to develop both strategy and actionable solutions for security compliance, certifications and governance. You will oversee the creation and revisions of security policies and controls, implement appropriate assessments, manage and track risk mitigation and remediation activities, and communicate compliance program results to Senior Management.
This is a highly visible role requires extensive interaction with the Kobie technology, client service, business development, legal, finance, human resources and call center organizations as well as direct interaction with our clients audit personnel. As such a consultative, "customer service" mindset is essential to the success of this Director. Kobie strives to grow in a secure and compliant manner, so we want to work together to empower the business and our customers while protecting critical assets.
How you will make an impact
- Continuously monitor, maintain, and document the status of Kobie's enterprise-wide compliance efforts including but not limited to, data security, privacy, Laws, Regulations, Standards, Contractual Requirements and company risk posture.
- Enable the continuous improvement of our security posture by developing and communicating a strategic cybersecurity vision that includes tools, processes, automation, and staffing while also overseeing the daily work that moves us towards that vision.
- Implement, manage, and show continued improvement against our information security management framework.
- Follow-up and investigate exceptions and anomalies discovered in monitoring processes.
- Direct and manage relevant Kobie team members with audit compliance projects.
- Meet with clients, account directors and team members to ensure requirements are being met prior to auditor review.
- Manage communication and interaction between external auditors and client teams.
- Oversee our phishing and security awareness program to ensure staff are aware of security issues (reminders, trends, alerts), Annual Security Awareness Training for all employees and contractors, and new-hire Information Security Awareness orientation.
- Perform on-site walk-throughs on a regular basis to ensure staff security compliance.
- Maintain currency with data security trends and concerns via industry standard materials, Continual Professional Education, Certifications and attending conferences.
- Support Business Development with security related RFP response content.
The Director of Compliance and Security is responsible for maintaining and improving a comprehensive enterprise information security and IT risk management program to ensure that information assets are adequately protected. This role involves working directly with technology, product, and operations to facilitate risk assessment and risk management processes. Along with security and IT risk management, this role also oversees our compliance function, ensuring compliance with policies, governance, contractual, and regulatory standards across our systems and environments.
What you need to be successful
- 10+ years of hands-on experience, with at least 3 years of direct relevant experience in a company that provides technology services to third parties involving personally identifiable information.
- Bachelor's degree in information security/computer science/information technology or equivalent work experience (Master's Degree a plus).
- At least one industry related certification such as Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA), Certified Information Systems Security Professional (CISSP) is required.
- Direct experience with security and privacy in cloud environments required.
- Excellent communication skills at all levels and within the user community as well as technology staff and general business staff; including specifically the ability to competently translate technical terms into common business language is required.
- Proven experience influencing senior business and technology leaders.
- Excellent skills with Microsoft Office and Office 365.
Additional Knowledge, Skills and Experience That Will Help You Stand out as a Candidate:
- Direct experience with Oracle Cloud is highly desirable.
- Working knowledge and direct experience with GDPR and CCPA data privacy rules highly desirable.
- Multiple security certifications are highly desirable.
Our teammates are at the heart of everything we do
Healthy people are happy people, which makes mental and physical health a top priority at Kobie. From robust health insurance and benefits options to free fitness programs like FitOn, to generous vacation time for yourself, we support your health needs fully. In today's job market, we know that employees are choosing only what works best for their life. For those that want career growth, Kobie is the perfect place. We have developed a comprehensive people strategy that helps every teammate know how to advance and progress on their career journey. Beyond title progression, Kobie's competitive pay, 401k matching, annual profit sharing and bonuses all make Kobie a perfect place to build your career.
Kobie a place for all
We don't just accept differences – we embrace, share, and celebrate them!
Employment at Kobie is based solely on a person's merit and qualifications, directly related to professional competence. We do not discriminate against any teammate or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis under the law.
We are fiercely committed to fostering a workplace where teammates draw upon their own diverse backgrounds, experiences, and perspectives so that they feel welcomed to bring their authentic self to work every day. While our leadership team fully and completely supports our policy of nondiscrimination and equal opportunity, all teammates share the responsibility to ensure we incorporate the principles of equity, diversity, and inclusion throughout Kobie.