Director, Business Information Security Officer - PGIM (Information Technology)

Job Classification:

Technology - Information Security

Prudential's Global Technology team is the spark that ignites the power of Prudential for our customers and employees worldwide. Our organization plays a critical and highly visible role in delivering customer-driven solutions across every area of the company. The Global Technology team is made up of diverse, agile-thinking, and highly skilled professionals; we use our combined capabilities to enable the organization with innovation, speed, agility, scalability, and efficiency.  

 

The Global Technology team takes great pride in our culture where digital transformation is built into our DNA. When you join the Global Technology organization at Prudential, you'll unlock a challenging and impactful career – all while growing your skills and advancing your profession at one of the world's leading financial services institutions. 

The Director, Business Information Security Officer - PGIM provides state of the art information security technical expertise and project execution for PGIM. Reporting into the Lead BISO for Domestic Businesses, this highly visible role will drive alignment of business focused security support and related security operations workflows and enables the implementation of appropriate data security procedures and standards. 

The successful candidate will work closely with BISO leadership, business stakeholders, risk functions, other ISO subject matter areas, and supporting CTO product owners in the design, development, testing and implementation of appropriate IT security plans, products and other access control techniques in accordance with Company standards. They will be focused on the execution of various adhoc strategic projects as well as supporting various Information Security activities as the need arises. This includes, but may not be limited to:

• Collaborating closely with Business stakeholders across all PGIM units enabling them to design and implement security compliant applications; including participating in review of proposed security related changes included in business/technical requirements

• Partnering with supporting CIO development teams on the ongoing application security assessment reviews

• Works with Technology and BISO Leads to ensure that appropriate security exceptions are documented, approved and filed; liaison to the ISO regarding any questions that may surface

• Coordinating and providing feedback to the ISO on Information Security Control standard revisions; communicating changes accordingly

• Supports the Lead BISO for Domestic Businesses with execution of Corporate ISO strategy into a well-controlled end-to-end information secure environment for the business

• Builds associate literacy and enables an “Information Security Mindset” across supported businesses

 Qualifications

• Eight or more years of experience in systems information security initiatives and practices

• Eight or more years' experience in security aspects of multiple platforms, operating systems, software, communications and network protocols

• Proficient knowledge of user authentication and access controls including SSO, LDAP, Active Directory, RACF, Windows, UNIX, ITIM/TAM is preferred

• Working experience and knowledge of the Software Development Life Cycle (SDLC) with particular focus on areas related to information security

• Strong versatility to be able to conceptualize the end-to-end Information Security processes and implementation options

• Ability to translate security and systems language into business context

• Capability to partner and facilitate information security discussions with technical and non-technical partners and interface effectively with all management levels

• Proven project management and risk management skills

• Strong organization, communication and presentation skills

• Strong analytical and time-management skills

• Proficient in MS Office products, including but not limited to Word and Excel

• Able to work independently and be a self-starter; managing multiple tasks according to priorities; results oriented and proven ability to meet deadlines

• Security Certifications (e.g., CISSP) highly desirable

• Bachelor's degree with a focus in Computer Science or Information Technology or equivalent work experience is highly desired

-