• Leads the day-to-day activities of our information security, cyber risk management, and incident response team. Responsible for the daily activities, priorities, and coordination of work across management, technical staff, and consultants.
• Evaluates the enterprise-wide information security program, identifies gaps, executes short-term corrective plans, develops long-range strategies, and reports on program health to internal and external stakeholders, ensuring alignment with overall business plans.
• Leads planning and response to disaster recovery events and security incidents. Identifies, manages, and communicates security incidents to key stakeholders. Maintains up to date business impact analyses and business crisis plans.
• Responsible and accountable for establishing, updating, and delivering a security awareness and training programs across the enterprise.
• Develops, maintains, and enforces information security policies and procedures in alignment with stated risk appetite, changes in threats, and overall compliance goals.
• Oversees all security audits and tasks. Participates in the technical aspects of all IT related audits and supports internally and externally managed audit activities.
• Collaborates with key business and IT leaders to assess, document, and act on information security risks, in alignment with stated risk appetite. Reports to stakeholders on monitored risks as appropriate.
• Responsible and accountable for the hiring, development, and performance management of staff within the security organization.
• Responsible and accountable for the planning, administration, and performance of the information security and risk management budget.

Required Qualifications:

• 10+ years IT experience with at least 7 in the information security and/or information risk management space.
• 5+ years leadership experience that includes development and management of managers or directors.
• Excellent communication skills with experience interacting and presenting to staff and leaders across technology and business areas, including executive leadership.
• Experience planning and controlling projects that deliver advance security program maturity.
• Must have expert level knowledge of current IT security techniques, industry trends, suppliers, and technology.

Preferred Qualifications:

• Bachelors or greater degree in related discipline preferred.
• Security specific certifications (CISSP, GIAC, CISM, etc.) strongly preferred.
• Knowledge of risk management & cyber-security frameworks including NIST-CSF, NIST-800, ISO-27000, BASEL II, EU DPD, PCI D, HIPAA, SOX.

Salary Range: $184,000.00-$253.000.00. The actual base salary is based on geographic location, and the range is representative of salaries for this role throughout Selective's footprint. Additional considerations include the candidate's qualifications and experience.

Selective is an Equal Employment Opportunity employer. That means we respect and value every individual’s unique opinions, beliefs, abilities, and perspectives. We are committed to promoting a welcoming culture that celebrates diverse talent, individual identity, different points of view and experiences – and empowers employees to contribute new ideas that support our continued and growing success. Building a highly engaged team is one of our core strategic imperatives, which we believe is enhanced by diversity, equity, and inclusion. We expect and encourage all employees and all of our business partners to embrace, practice, and monitor the attitudes, values, and goals of acceptance; address biases; and foster diversity of viewpoints and opinions.

Selective maintains a drug-free workplace.

#LI-SB1

#LI-hybrid