WHO WE ARE:

Harford Mutual Insurance Group is a growing, dynamic mutual insurance carrier providing commercial property and casualty insurance products and services to a regional market. Headquartered in Harford County, Maryland, Harford Mutual offers a positive, diverse, and inclusive work environment with a rich company culture. Founded in 1842 on the principles of mutuality, we believe in insuring opportunity through mutual success® for our policyholders, agents, communities, and employees, and invite our employees to continue that tradition with respect, integrity, exemplary service, and personal responsibility.

THE OPPORTUNITY:

The Director of Information Security will drive our enterprise-wide security strategy, operations, and program oversight. This role will be responsible for identifying, developing, implementing, and maintaining process across the organization to reduce information and technology risks. The role will be required to respond to incidents, establish appropriate standards and controls, manage security technologies and direct the establishment and implementation of policies and procedures.

LOCATION:

In-Person/Hybrid (Bel Air, MD Location)

WHAT YOU’LL DO:

Develop and execute an enterprise-wide security plan including tools, architecture, and training plans
Oversee and mitigate risk to information assets via a suite of security architecture and technologies
Direct the installation and maintenance of security infrastructure
Manage security incidents and events
Ensure compliance with the changing laws and applicable regulations, following our chosen route of NIST Cyber Security compliance
Maintain and improve on the companies NIST rating, following recommendations from 3rd party and internal audits, implementing changes relative to the size and nature of our organization
Implement monitoring tools and the people who utilize those tools for incident identification and incident handling
Create reporting consumed by the companies ERM and, ultimately, consumed by the Board of Directors
Translate complex information security concepts into understandable, actionable, and measurable initiatives and plans
Identify, assess, mitigate, and monitor IT-related risks
Guide department managers and staff in the overall implementation of risk management and compliance practices
Establish business continuity procedures and disaster recovery plans

WHAT YOU’LL BRING:

Minimum of Bachelor of Science in Computer Science, Information Technology or a related field with Masters preferred
8 – 10 years extensive security experience to including information security, risk management, and compliance.
3 – 5 years supervisory/managerial experience required
CISSP and CISM certifications
Experience with IT risk management, threat modelling, and design reviews
Proficiency in information security domains, including policies and procedures, risk management, compliance, and incident response
Familiarity with security frameworks (ISO 27001, NIST, CIS, etc.) with a deep understanding of the NIST Cybersecurity Framework
Ability to manage and coordinate an information security team
Excellent written and verbal communication skills
Ability to adapt to changing priorities and technologies
Strong consideration given to candidates with prior insurance background

BENEFITS:

Health
401k w/ Match
Education & Training
Company Incentive Plan
Paid Parental Leave
Self-Managed PTO
Hybrid Schedule

Visit our website for more information on our competitive Perks & Benefits.

Harford Mutual Insurance Group

New Jobs

Director of Information Security