Security Assurance Lead

About the role:

As the Security Assurance Lead in Infrastructure Engineering & Cloud Operations (IECO), you'll bring Security Assurance expertise and discipline to teams across our organization responsible for operating and advancing Blackbaud's public and private cloud environments. You will serve as a subject matter expert and driving force behind IECO's Security Assurance strategies bringing a security mindset, strong collaboration skills, change leadership, and proven experience in cybersecurity audit and risk management. You'll guide our teams in more deeply integrating security into our culture; ensuring we deliver solutions that foster customer and consumer trust.

What you'll be doing:

• Lead teams in strategic and tactical planning and in predictably and efficiently delivering on our Security Assurance commitments.

• Liaise with cyber security, legal, corporate risk management and technical stakeholders on a regular cadence to ensure continuous alignment of strategies, plans, measures, and status.

• Partner with process owners and key stakeholders to guide definition and development of policies, procedures, and standards, as well as methodologies for implementation and awareness.

• Facilitate control assessments, testing, and gap analyses for technical controls, providing recommendations for improvement and risk treatment when appropriate.

• Advise remediation owners in the formulation of risk treatment plans and ensure the risk treatment plans are effectively executed and governed.

• Prepare and provide reporting for all levels of top-down leadership visibility, such as dashboards and metrics, on various areas of performance, gap analysis and assessment statuses.

• Coordinate assessment preparation, communication, and activities as needed

• Sustain knowledge of the latest security threats, vulnerabilities, and best practices, and guide our teams in continuing improvements and efficiencies.

• Foster a culture that builds a security mindset, contributing to security awareness and training.

What we'll want you to have:

• Bachelor's degree in computer science, engineering or information technology or equivalent related work experience required.

• Minimum of 12 years of infrastructure and security experience in private and public cloud technologies supporting large and complex 24x7 environments.

• Minimum of 5 years industry experience in IT compliance and or IT audit.

• Advanced comprehension of security and risk best practices and industry standards from a business, technical, and operational perspective; demonstrated understanding of cyber risks and controls

• Relevant industry recognized certification like Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) required

• Practical experience with cyber security control frameworks such as NIST CSF, AICPA SOC 2, and the Cloud Controls Matrix.

• Practical experience with ITIL required; lean and agile methodologies preferred

• Demonstrated ability to think critically and facilitate change through collaborative effort.

• Excellent written and verbal communication; able to communicate complex technical information to all stakeholders

• Innovative and adaptable in problem-solving; able to lean into the details while keeping the big picture in sight

• Available on a 24x7x365 basis when needed for production impacting incidents or key customer events

#LI-REMOTE