Head of Information Security
Waltham, MA

Job Description

Vistaprint is a Cimpress company passionate about empowering people to make an impression through individually meaningful, personalized physical products. We are a team of over 6,000 members in 24 countries working together to empower over 17 million customers to make an impression. We are passionate, self-starting and audacious. We thrive in an entrepreneurial environment. Whatever geography we're in, we bring exceptional talent together. We never stop learning and we believe you shouldn't either.

The head of information security at Vistaprint is responsible for leading the information security team and guiding it through implementing security through all infrastructure, manufacturing, development and production worldwide. The position reports to the CTO of Vistaprint, and has a dotted line to the Cimpress CSO.

Roles & Responsibilities

* Security Leadership. Serve as the lead for security at Vistaprint, which includes technical integration aspects of security technologies and processes. Provide expert counsel to tech and business leaders and to the CTO.
* Organizational Leadership. Effectively lead the security team through interactions with R&D and other technical tribes within Vistaprint.
* Security Assessment. Continuous security assessments need to be performed to establish a realistic understanding of the maturity levels of the various security capabilities according to the NISTCSF. Fluency in working with NIST-CSF is absolutely required. Familiarity with the FAIR risk management framework is highly sought after as it is being used to manage risk across the Cimpress companies.
* Global scope. Vistaprint is a global company with locations in the US, EU, and Asia. The role requires strong communication skills and the ability to scale the security team's impact through organic means such as the security champion program.
* Engineering integration. As security is integrated into the dev processes at Vistaprint, the role requires a strong technical background and experience with modern development practices.
* Communication & Coordination. You will be expected to translate technical risks into organizational ones when communicating with senior leadership. The role also includes responsibilities for addressing compliance and regulatory requirements at Vistaprint and works closely with the legal and data privacy functions.

Professional Qualifications

* Minimum of 10 years of experience as an information security leader with exposure to ecommerce businesses and small/medium enterprises.
* Significant experience across modern engineering and product teams within technology organizations. Proven track record implementing the following programs: incident response, DLP/DR/BCP, IAM, security architecture, DevSecOps, privacy by design and policy/compliance.
* Technical education (EE/CS degree) as well as a business mindset to be able to translate technical scenarios to business impact.
* Significant experience working in hybrid onprem and cloud environments. Experience with manufacturing facilities a plus.
* Superior written and verbal communication skills. Ability to serve broadly as a security consultant, advocate and authority.

Personal Qualifications

* Modern technologist and thinker. We thrive to allow our businesses to be as competitive and innovative as possible.
* Business strategy Security is a force multiplier at Vistaprint. We believe in small teams that can make an impact through shared responsibility models and leveraging resources outside of the team.
* Values team building and chemistry - advocates a servant leader mentality.
* Utmost integrity dealing with sensitive security issues.

#LI-PC1

Nearest Major Market: Waltham

Nearest Secondary Market: Boston

Job Segment: Information Security, Engineer, Law, Risk Management, Technology, Security, Engineering, Legal, Finance