Head of Information Security and Data Privacy

Responsibilities

• Lead enterprise-level information security, encompassing both application and cloud security
• Design, implement, and manage security measures for cloud-based infrastructure to ensure data integrity and availability
• Develop and implement strategies for securing applications throughout the software development lifecycle (SDLC)
• Oversee certification compliance for standards including ISO, SOC, and PCI DSS
• Lead and oversee the implementation and maintenance of GDPR and CCPA compliance programs
• Conduct regular security assessments, audits, and penetration testing to identify and remediate vulnerabilities
• Develop incident response plans and monitor security logs for timely threat detection
• Implement security automation tools to streamline operations and enhance efficiency
• Conduct Privacy Impact Assessments (PIAs) to identify and mitigate potential privacy risks

Requirements

• 18+ years of professional experience in information security or related fields
• Proven experience working within a global footprint
• Deep expertise in developing and implementing enterprise strategies for managing technology risks
• Strong familiarity with information security management frameworks, specifically ISO/IEC 27001 and NIST
• Extensive knowledge of data privacy regulations, including GDPR and CCPA compliance

About the Company

RateGain is a leading provider of SaaS solutions for the travel and hospitality industry, offering intelligence and distribution technologies to hotels, airlines, and travel providers worldwide.