Information Security Director

Company: First American
Location: Santa Ana
Posted on: September 15, 2020

Job Description:

Job Family: Information Security Professionals

Requisition Number: R017414

Work Location: Santa Ana , CA

Employment Category: Full Time – Regular

Join our team! As a global leader in providing title insurance, settlement services and risk solutions for real estate transactions, First American (NYSE: FAF) is an ideal place to build your career. We have been entrusted with helping our customers achieve and protect their dream of homeownership since 1889. We believe that our people are the key to the company’s continued success, and we invest in diverse talents and backgrounds and empower our teams to achieve more than they could anywhere else. First American has created an award-winning culture and has been named to the Fortune 100 Best Companies to Work For® list for the fifth consecutive year and to more than 50 regional Best Places to Work lists. For more information, please visit www.careers.firstam.com

Job Summary Director, Application Security

Job Description

As a Director of Application Security, you will be a key member of the Information Security group; leading a team responsible for our overall secure Software Development Life Cycle (SDLC) program. The successful candidate will be responsible for defining application security requirements and ensuring the delivery of secure applications and solutions. The Application Security program is designed to ensure that any software developed by our engineers meets our overall security goals to protect our data. The successful candidate will exhibit the skills of an experienced leader, with a disciplined approach to process. You will work with a group tasked with coordinating across many functional teams to ensure that our applications stay at the highest security level. In a dynamic rapidly growing organization, you will be required to be innovative and collaborative in order to be successful. Candidate must be comfortable working and communicating with executives and can work at a deep technical level with engineers.

Essential Functions

The Application Security Director would lead a team of technical specialists who partner with First American’s Technology and business teams in releasing secure and compliant infrastructure, applications and experiences at the speed of business.

Lead a team of robust individuals who perform security reviews and recommend security solutions to meet current and future needs for First American’s applications

Drive the development and implementation of standard security review processes that result in effective methods for reducing security risks before product releases

Demonstrated experience handling the demand/supply of project and program resources and tracking allocation

Demonstrate an ability to influence all project and portfolio partners; communicate relevant security information to both executive leaders and individual contributors in an effective manner.

Bring a deep background and broad experience in Information Security, Application Security, & Application Development or related business areas

Demonstrate the ability to effectively collaborate with Executives, Directors, Managers and Team Members in the pursuit of measurable outcomes and results

Lead project budgets and scope and conduct resource planning for risks that are proactively identified.

Ability to produce effective metrics reporting the state of application security programs

Establish and communicate departmental objectives, ensuring alignment with function and company strategic direction

Translate strategic goals and priorities into technical strategies and objectives for his/her department

Provide input into the Information Security strategy to ensure that future security investments are aligned appropriately when considering key priorities such as business requirements, industry threat landscape, and risk appetite of First American

Work under minimal direction from functional executive

Provide operational and project direction to department managers and monitor performance against agreed upon objectives

Utilize a broad internal and external network of professional contacts and resources to explore new approaches for solving problems and enhancing the department’s capabilities

Review Managers’ objectives and results to evaluate success of operation, quality, schedules and budgets

Results and progress toward goals is periodically reviewed by functional executive

Experience

8-12 years of experience leading and developing teams focused in the areas of Security Architecture, Secure Development Lifecycle Management, Application Security (WWW and Mobile), Cloud Security, Risk and Compliance

Strong experience with implementing successful and effective SDLC program with high level of automation

Deep experience in securing infrastructure and data per SOX, GDPR, PCI, Global security mandates

Experience performing Threat Modeling and integrating threat modeling practices into the product life cycle

Experience in performing architecture and source code reviews for security issues

Advanced knowledge and experience in penetration testing of custom web and mobile applications, complex cloud environments and web services (REST & SOAP)

In-depth experience with common web application vulnerabilities, such as the OWASP Top 10, and business logic flaws; ability to explain all vulnerabilities and weaknesses and discuss effective defensive techniques

Experience with application vulnerability scanning products

Excellent verbal and written communication skills, including experience speaking in public forums

Demonstrated experience leading direct reports, as well as teams within large multi-functional projects

Consistent record of being results orientated with demonstrated ability to achieve results-oriented goals.

Outstanding communication skills, including the ability to gather relevant data and information, actively listen, dialogue freely, verbalize ideas effectively, negotiate tense situations successfully, and handle and resolve conflict

Proven presentation and facilitation skills

Demonstrated expertise of building a consensus across business partners and technology leaders and influencing successful outcomes

Ability to communicate function vision and establish aligned direction and goals; obtain and effectively allocate resources; create systems to measure results

In-depth understanding of competitor, financial and industry dynamics

Experience working successfully in a high matrix organization

Security+, GSEC, CISSP certifications are strongly desired.

Education

Bachelor's degree or higher in Computer Science preferred

First American invests in its employees’ development and well-being, empowers them to provide superior customer service and encourages them to serve the communities where they live and work. First American is committed to diversity and inclusion. We are an equal opportunity employer. For more information about our Company and our dedication to putting People First, check out firstam.com/careers.

Returning users, access your profile or edit/update your resume.

Careers // Director, Application Security – R017414

First American Title Insurance Company makes no express or implied warranty respecting the information presented and assumes no responsibility for errors or omissions.

First American, the eagle logo, firstam.com, and First American Title are registered trademarks or trademarks of First American Financial Corporation and/or its affiliates.

Keywords: First American, Santa Ana , Information Security Director, Other , Santa Ana, California