• Technical design, implementation, maintenance, and strategic thought-leadership responsibilities for multiple information security disciplines such as security policy, awareness and education, risk management, incident response, vulnerability management, intrusion detection and prevention, regulatory compliance, and security operations. • Drafts and reviews information security policies, processes, and procedures. • Prepares information security awareness and education materials and other documentation. • Determines and documents information security requirements and controls necessary for the protection of information resources. • Implements and administers plans, processes, and procedures necessary to ensure compliance. • Supervises other information security professionals and acts as a senior consultant to internal and external stakeholders or auditors as well as senior management. • Provides guidance and assistance regarding information security matters such as the interpretation of information security policies and requirements or their applicability to particular situations. • Oversees information security incident response activities, risk assessment and risk management activities, and vulnerability assessment and vulnerability management activities spanning multiple business units. • Manages detailed network, operating system, database, and application vulnerability assessments and security configuration audits. • Manages information security projects and initiatives. • Oversees operational tasks supporting information security functions such as intrusion detection and prevention, security event log analysis, management reporting, virus prevention and remediation, encryption, network segmentation, remote access and authentication. • Supports, maintains, monitors, troubleshoots and enhances security infrastructure tools, methodologies, software, and hardware. • Independently develops automated tools and methodologies in support of Information Security functions. • Analyzes data from Information Security functions and provides reports and recommended response actions to Information Security management. • Represents Information Security to other organizations on information security related matters, as assigned. • Publishes regular status reports and submits to management. • Performs related responsibilities as required.