Director, Information Security

Your Opportunity at ARC’TERYX:You will be the second most senior security professional and will report directly to the Vice President, Information Security. You will have direct responsibility for the support and success of a risk focused security practice that encompasses the full width of Arc’teryx technical, regulatory, and privacy obligations. Your efforts will support practice leadership and will overlay current and foreseeable risks into the design and management of security controls, processes, architectures, and tooling.    You will participate in the design and execution of security programs ensuring their success through a hands-on leadership approach. This role requires a combination of engineering knowledge and strategic leadership resulting in programs that realistically measure and mitigate risks. You will be deeply involved as a trusted partner for all areas of Arc’teryx engineering leadership.   This role requires you to have excellent communication skills at all levels of the organization. This cross-cutting role requires reality based risk measurement that takes into account Arc’teryx business objectives balanced with technical and compliance responsibilities. This role will include direct and matrix style leadership of both leaders and direct security engineering roles.   This role is open to hybrid remote work.
Meet Your Future Team:You will be working directly with the Vice President, Information Security to support and advise leadership, and create security programs that overlay all aspects of engineered systems in close and ongoing collaboration with senior leadership, domain leaders, subject-matter experts, and fellow engineers.  

If you were in the Director, Information Security role now, here are some of the core activities you would be doing:

• Aggressively identify, measure, and prioritize Arc’teryx state of controls followed by the execution of triaged remediations.   
• Deeply partner with Information Systems (IS) leaders acting as a collaboration partner and co-problem owner.   
• Assist in the design, implement and manage the creation of a security practice that encompasses: 
• A Survivability program that reduces risk through vulnerability management, secure configuration, and SAST/DAST application security practices across the Arc’teryx technology stack. 
• A Compliance/GRC function that addresses Arc’teryx obligations by delivering policy and standards that are consumable, provides regulatory/ compliance guidance across all IS functions, and executes all required audits such as SOC2, PCI-DSS, or ISO27001. 
• A Security Inclusivity program that educates and inspires Arc’teryx staff on all matters Information Security and executes all required security awareness training across the enterprise.  
• A Privacy program that insures Arc'teryx meets regional and international privacy standards such as CCPA/CCPR and GDPR.  
• Access, Authorization, and Accounting to include Identity and Access Management oversight across the Arc’teryx IS organization.  
• Strategic Business Alignment and leadership in the Information Security organization. 
• Functional Data Loss and Prevention 
• Create a security leadership culture that focuses on collaboration, inclusivity, and strong cross-functional partnership.  
• Foster an engineering environment that enables speed, flexibility, and iteration through the enablement of engineering creativity and innovation.  
• Enable other engineering programs within Information Systems (IS) to move decisively through the application of compensating controls and enabling security processes.  
• Implement best security practices using tool-agnostic methodologies that enable IS engineers to creatively solve problems. 

Here are some of the things you could be working on in the future:

• Creating cross-functional Incident Response program that ties technical response functions to strategic legal, communication, and executive leadership incident management processes.
• Executive Level Risk Reporting to the VP, Information Security. 
• An Active Defense program that utilizes tooling such as IPS, WAF, DDOS, SIEM, SOAR, and endpoint defense technologies to identify, contain, and mitigate malicious activity. 

Are you our next Director, Information Security?

• 15+ years of security engineering and leadership experience operating in complex enterprise class environments. 
• The ability to communicate and inspire security focused change at both the IC and senior leadership levels.  
• When communicating risk you present a balanced fact/data based assessment that is consumable, clear, and direct.  
• Operate your security practice in a cost conscious and sustainable manner that allows flexibility and the ability to quickly pivot around new technology challenges. 
• Demonstrated experience providing calm and clear leadership during complex and fast paced incidents or outages.  
• Possess a deep understanding across IaaS, PaaS, Hybrid, and On-Prem and are able to articulate and leverage the security merits of each.  
• Be able to clearly articulate the security paradigm differences presented by heterogeneous, hybrid, and cloud based approaches to technology problems.  
• Designed and influenced security design in retail and edge computing leveraging the benefits of modern PCI-DSS scope reduction technologies.  
• Experience providing direct and inspirational leadership to both technical and compliance focused teams in an enterprise environment.   

Equal Opportunity
Arc’teryx is committed to actively creating and fostering a culture of inclusivity where voices are heard, people are seen, and values are respected. We care about the uniqueness of our applicants, employees, and guests, and we do so in a safe space fueled by curiosity and acceptance. 
Creating an inclusive workplace is connected to our core value Do Right while also having the added benefit of helping make our business better. We believe inclusion helps us to create a healthier, happier workplace, drive creativity and innovation, and reflect the communities where we operate.  
All applicants, employees, and guests can expect equality of opportunity and fair treatment in alignment with our values.
Design your Purpose. Live our Values. DISRUPTIVE EVOLUTION. Design your future through challenge, experimentation, and inspiration.COMMIT. Set and deliver on bold objectives as we collectively raise the bar.LIVE IT. Deepen your connection to nature and live your most purposeful life. LEAVE IT BETTER. Create a better world, together.