Beach Point Capital Management is a global investment firm founded in 2009 with expertise in credit strategies. The firm is a multi-billion AUM organization and specializes in sectors such as high yield bonds, leveraged loans, private and illiquid credit, direct lending, and structured credit. Beach Point also has focused strategic initiatives in private equity and real estate. The firm invests on behalf of institutional investors and currently has over 175 employees globally with offices in Los Angeles, New York, Dublin and London. Beach Point was named to Pension & Investments’ list of Work in Money Management in 2020, 2021, 2022 and 2023 and Best Companies Group for Inclusive Workplace in 2022 and 2023.

Beach Point Capital is seeking an experienced Director of Information Security to further develop and enhance the firm’s information security program. This role will ensure compliance with industry regulations and standards, enforce robust policies, and provide strategic direction for the firm’s information security roadmap.

About the role:

Located in Santa Monica, CA
Full-time, exempt with 3 days in the office and 2 days remote
Reports to the CTO

Key Responsibilities:

Develop, maintain, and enforce the firm's information security policies, procedures, and standards in accordance with legal and regulatory requirements, such as SEC, FINRA, GDPR, and any applicable financial industry regulations.
With a hands on approach, lead and oversee the firm's information security program, including cybersecurity, identity management, risk assessment, incident response, and security awareness training.
Directly manage a comprehensive security strategy that includes network defenses, endpoint protection, data loss prevention, threat intelligence, and security monitoring.
Collaborate with key stakeholders to align security initiatives with business objectives and risk management strategies.
Conduct regular security audits, vulnerability assessments, and penetration tests to evaluate the effectiveness of security controls and policies.
Work closely with IT leadership to ensure the secure implementation of new technologies and the review the effectiveness of security controls and policies around existing architecture.
Lead the incident response team in managing and investigating security breaches and incidents while minimizing business impact.
Develop and oversee a vendor risk management program to ensure third-party compliance with the firm’s security standards.
Collaborate with legal and compliance departments to ensure all data privacy practices align with legal requirements and to provide supporting documents for security governance programs.
Manage, mentor and develop a team of technology and security professionals, nurturing a culture of teamwork, integrity, excellence, humor, and results.
Stay abreast of the latest security trends, threats, and technologies to maintain the firm's cyber security resiliencies and capabilities.
Regularly report to cyber security committee on the state of information security program, potential risks, and recommendations.
Develop, standardize, and maintain security documentation, including the Information Security Program, Incident Response Plan, Security Policies and Procedures, and Infrastructure Presentations.
Identify third-party vendors for security due diligence of both external and internal applications used by the firm.
Conduct account audits and sensitive data validation audits, leveraging the data classification system.
Audit and maintain records of Active Directory data ownership, distribution list memberships, and employee access and approvals.
Monitor daily security alerts, log review, and maintain records of security incidents.
Manage the documentation for Windows and third-party patching processes and security hardening measures.
Provide new hire security training, conduct monthly phishing exercises, and maintain security training documentation.
Schedule and document annual risk assessments, penetration tests, and bi-annual disaster recovery tests, including maintaining the disaster recovery notification system.
Keep the employee status roster up-to-date in coordination with HR.
Oversee the creation and maintenance of onboarding/offboarding documentation and the electronic keycard register.
Act as the firm's main point of contact for managed security service providers and vendors.
Regularly inform the firm of significant security updates and maintain ongoing security-related communications.

Qualifications:

A minimum of 7 years of experience in information security, IT risk management, or related field, with at least 5 years in a leadership role.
Bachelors degree in Information Security, Computer Science, Information Systems, or related field.
Professional information security certifications such as CISSP, CISM, CISA a plus.
Strong understanding of the cyber security risks associated with various technologies and ways to manage them.
Ability to present security findings and reports to key stakeholders including executive management and cyber security committee.
A proven track record of developing and administering an information security program in a complex environment.
In-depth knowledge of financial industry's policies, procedures, regulations, and legislation specifically as they relate to investment management sector.
Excellent communication, leadership, and presentation skills to effectively convey complex information security topics to technical and non-technical audiences.
Demonstrated ability to collaborate, build consensus, and drive initiatives in a complex business environment.
Hands-on experience with business continuity planning, auditing, and risk management, as well as contract and vendor negotiation.
Relevant experience in information security management, governance, and operations.
Familiarity with conducting audits, risk assessments, and working within regulatory frameworks.
Experience in incident response planning, access control audits, and vendor management.
Demonstrated ability to create and conduct security training programs.
Excellent organizational skills, with the ability to manage multiple processes and maintain meticulous records.
Strong communication skills for interfacing with various departments, vendors, and key stakeholders.

What We Offer

Competitive salary, annual bonus and excellent benefits package.
Professional and dynamic working environment with a great culture.
Opportunities for career development and professional growth.
A supportive and collaborative team committed to legal and regulatory excellence.

Beach Point provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, sexual orientation, age, disability or genetics. In addition to United States federal law requirements, Beach Point complies with applicable state and local laws governing nondiscrimination in employment. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Beach Point Capital Management jobs

Director of Information Security