Director of Cyber-security

**What we’re looking for**:
You will play a key role in overseeing the bug bounty program, security code audits, security policies and procedures along with building a Cyber-Security team to ensure all infrastructure and development follow best practices. Education of staff on Cyber-Security matters is also a critical portion of the role, whether it be on AML, phishing attacks or OWASP Top 10.

**What you’ll be doing**:

- Develop strategy for a global, scalable, and optimal set of security solutions to support Security.
- Systems Lifecycle Management that aligns with the business strategy.
- Analyse security requirements and solutions to meet control objectives and risk appetite.
Partner with key technical teams and stakeholders to organise and facilitate security workflow and process automation alignment discussions.
- Oversee and receive updates on major IT projects, IT budgets, IT priorities, and overall IT performance.
- Oversee the regular review of current security processes, design and configuration to ensure those adhere to industry best practices, security standards and foster continuous improvement.
- Approve policies to escalate and report significant security incidents to Executive Management.
- Identify and assess risks in implementing business systems or frameworks and provide assessment of those risks to business stakeholders.
- Hold management accountable for identifying, measuring, and mitigating IT or cybersecurity risks.
- Provide for independent, comprehensive, and effective audit coverage of IT controls.
- Develop and manage the annual budget for the Cyber Security team and program implementation.
- Create, update, manage and distribute updated security requirements, workflows, roadmaps and their respective details through various tracking and reporting means.
- Submit monthly and quarterly progress reporting and corrective action planning with accountability to Executive Management.
- Mentor, coach, develop and support team members of the Application Security Engineering group.
- Serve as a resource to requestors of IT demand and project leaders to educate and assist them with implementing and complying with security requirements and workflow processes.
- Oversee Bug Bounty Programmes, code audits, penetration testing activities.

**Requirements and what we look for in you**:

- 10+ years in Cyber-Security.A strong understanding of information and cyber security principles and best practices.
- Strong understanding of the security requirements lifecycle process and software development lifecycle (SDLC).Proven experience and understanding of security analytics and code audit.
- Proven expertise in developing and implementing processes, process integration and process changes.
- Ability to develop and nurture strategic relationships with key stakeholders throughout the organisations.
- Ability to pick up new products and platforms quickly, transferring skills and best practises when needed.
- Flexibility, ability to plan and organise, responsiveness, creativity, self-starter.
- Ability to build solid working relationships with peers and senior leadership.
- Ability to demonstrate strong written, verbal communication and presentation skills to all levels of seniority and disciplines within the organisation.
- Experience with oversight and building working relationships with Managed Security.
- Services providers, as well as other integrated vendors and third parties included in operations.
- Proven experience in leading, organising, prioritising and communicating tasks for security engineers.
- Minimum 2 Years Conceptual knowledge of the following regulations: PCI, Sarbanes-Oxley, HIPAA, GLBA, FISMA.
- You are kind and respectful of others’ opinions and you are open and act with integrity when engaging in academic or technical discussions.
- Proficient English language and communication skills.
- Self motivated, independent and well organised. Someone who works well on your own and with a team.

**Nice to haves**:

- Development experience related to blockchain.
- Haskell / Scala experience.

**Location Preferences in order**:

- Republic of Ireland
- United Kingdom
- Switzerland
- Netherlands

**Work at the Cardano Foundation**

Cardano Foundation is striving towards a blockchain-enabled better future, based on inclusiveness and transparency. Our ambition is to build a blockchain-complete era’s global financial and social operating system. We can only achieve our goal with the best talents We are attracting high-performing individuals who think outside the box and will take us to new heights. If you are up for unlocking opportunities and create value with relevant experience, we would love to hear from you.

**Benefits**:

- Open minded, collaborative and diverse culture with truly human values
- Equal opportunities at anytime in respectful, fair and conscious surroundings
- Learning and development opportunities to strive for your individual goals
- Referral bonus for your eff