Xpansiv is unleashing the power of global markets to deliver a world worthy of future generations. We’re the largest market for commodities inclusive of vital ESG factors (Environmental, Social, and Governance). These Intelligent Commodities bring transparency to markets, empowering participants to value energy, carbon, and water to meet the challenges of an information-rich, resource-constrained world.

We’re the marketplace for an ever-expanding ecosystem of proven environmental commodities, like Renewable Energy Certificates (RECs), offsets, and differentiated fuels. We connect buyers and sellers of Intelligent Commodities in a global liquidity hub that accelerates the transition to a net-zero future.

Position Summary:

Xpansiv is looking for an Information Security Officer to join the Risk and Compliance team. This role will be key in the future development of the information security program working directly with the CTO, engineers, risk, legal, and the lines of business, as well as with executive management. This role will work to meet the company’s information security strategic goals. The Information Security Officer is responsible for executing Xpansiv’s information security program. This role will help set the strategic direction and day to day execution of the information security program.

Essential Functions

Responsible for further development and execution of Xpansiv’s information security strategic plan in partnership with the Chief Risk Office, Chief Technology Officer and other security, business and technology team members
Propose enhancements to the Information Security policies, standards and procedures
Update the Information Security Program based on regulatory changes, threats, best practices, business needs and feedback from management

Job Requirements

Determine acceptable risk levels for the Information Security and ensure threats to the company are mitigated in alignment with the company’s risk appetite
Support audits and regulatory exams. Coordinate management's responses to information security-related findings
Lead responses to customers’ information security inquiries into Xpansiv’s security posture
Participate in the development and implementation of the appropriate and effective controls to protect the organization’s assets
Participate in the preparation of risk assessments to evaluate new technologies, applications, and devices
Build out the information security awareness training for employees and Board of Directors
Support or execute security related testing as needed for material technology driven changes.
Collaborate with the business and/or Information Technology to select appropriate technology vendors that support regulatory requirements and best practices
Familiarity with key security solutions
Understanding of international security obligations
Develop and then maintain a company-wide data loss prevention program to protect customer and company confidential information
Provide guidance on projects, new implementations, or upgrades in adherence with the Information Security Program
Run the Business Continuity Program, which includes working closely with business lines to ensure business impact analyses are comprehensive

Other Knowledge, Skills and Abilities

Bachelor's degree in computer science, information systems or equivalent work experience is required
Industry standard certification in information security, such as CISSP, CISM, CRISC, or acquisition within one year of hire
Five years of experience supporting security architectures and applying security best practices across enterprise environments
Highly familiar with cloud-based solutions
Possess excellent analytical, organizational and documentation skills
Strong knowledge of both cybersecurity and IT risk management programs based on industry recognizable frameworks
Strong collaboration and communication skills
Equally comfortable working independently as with a team
Persuasive leader who can serve as an effective member of the management team and is able to communicate security-related concepts to a broad range of technical and non-technical staff
Practical experience with vulnerability scanning and auditing tools
Knowledge of DevOps application security
Experience with cloud security best practices
Ready to work in a highly dynamic and exciting environment.

Here at Xpansiv, we cultivate diversity, celebrate individuality, and believe unique perspectives are key to our collective success in building trust and transparency in global efforts toward net-zero future. Xpansiv is committed to equal employment opportunity regardless of race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, protected veteran status, or any status protected by applicable federal, state, or local law.

Note to Recruiters: Xpansiv does not accept unsolicited resumes or referrals from placement agencies, staffing vendors or other external parties seeking recruiting fees without a signed formal agreement.

Xpansiv

About Us

New Jobs

Information Security Officer