Director of IT Security

Join our Winning Team as a Director of IT Security - Data Centre

When was the last time you bragged about where you work? At CARFAX, we do it every day. Why? Because we’re proud to work for a company with a strong mission and trusted brand. We’re proud to work with people who care about what they do and work hard every day to deliver their best. We’ve created the type of company culture where the term, “work- hard play- hard” isn’t just a catchy saying, it’s part of the #CARFAXdifference!

The Director of Security Operations is responsible for securing the Carfax ecosystem and enterprise assets. They will establish security best practices and processes to ensure compliance to security standards. Proactively manage the security team and practices across the enterprise with current and future needs of the company to protect from vulnerabilities that could disrupt operations.

Essential duties:

• Build and grow the security team needs for current and future protection of operations and assets. Roadmap, budget, and project plan accordingly for those needs.
• Supervises and directs all cyber security risk activities across Carfax, including annual penetration testing and predictive risk gathering and communication of those risks to the other teams within Carfax.
• Communicating with senior executives the company’s security posture, understanding and evaluating risks, and developing a plan of action.
• Build a team atmosphere with a combined approach to security and management of protecting the environment.
• Supervising the Phishing Awareness Program and related awareness trainings and actions.
• Work closely with security and IT vendors to ensure optimal deployment and configuration of existing and new tools for security protection of the environment.
• Develop, implement, and align with required regulations for Carfax operations to meet the business objectives and customer needs.

Strong working knowledge and direct experience with the following technologies, practices, and standards:

• Next Generation and Web Application Firewalls
• Content delivery networks
• Bot mitigation technologies
• Penetration Testing
• Antivirus technology
• Phishing and malware protection education and services
• Endpoint protection and mitigation

To be considered for this role, you will need:

• 8 years experience in IT security
• 2 to 3 years of leadership experience
• Strong oral and written communication skills
• Building a security roadmap, policy documentation, risk assessments, and budgets
• Self-directed initiative and ownership

About CARFAX

CARFAX, part of S&P Global Mobility, helps millions of people every day confidently shop, buy, service and sell used cars with innovative solutions powered by CARFAX vehicle history information. The expert in vehicle history since 1984, CARFAX provides exclusive services like CARFAX Used Car Listings, CARFAX Car Care, CARFAX History-Based Value and the flagship CARFAX® Vehicle History Report™ to consumers and the automotive industry. CARFAX owns the world’s largest vehicle history database and is nationally recognized as a top workplace by The Washington Post and Glassdoor.com. Shop, Buy, Service, Sell – Show me the CARFAX™. S&P Global Mobility is a division of S&P Global (NYSE: SPGI). S&P Global is the world’s foremost provider of credit ratings, benchmarks, analytics and workflow solutions in the global capital, commodity and automotive markets.

CARFAX is an Affirmative Action/Equal Opportunity Employer. It is the policy of CARFAX to provide equal employment opportunity to all persons regardless of race, color, sex, pregnancy, religion, national origin, age, ancestry, citizenship status, veteran status, military status, disability or handicap, sexual orientation, genetic information or any other status protected by federal, state or local law. In addition, CARFAX will provide reasonable accommodations for qualified individuals with disabilities. We maintain a drug-free workplace. We are a participant in E-Verify.