Director, IT Information Security, Policy and Compliance Job in Bartlesville, Oklahoma US
Director, IT Information Security, Policy and Compliance
Company overview: ConocoPhillips is an international, integrated energy company with operations in more than 30 countries. As the third-largest integrated energy company in the United States, ConocoPhillips? goal is to deliver energy in a safe, environmentally and socially responsible manner. More than 29,700 ConocoPhillips employees work worldwide to consistently deliver top performance and value to maintain the company?s global market position. Employees? individual talents and strengths combine to create a diverse and energized work force within ConocoPhillips. Headquartered in Houston, Texas, ConocoPhillips stock is listed on the New York Stock Exchange under the symbol ?COP.? ConocoPhillips Information Technology (IT) provides essential business applications, technology and end-user support for the corporation, a Fortune 4, integrated energy company. IT includes a network of 1,600 employees strategically located in 16 countries providing systems and follow-the-sun services. : The Manager IT Information Security, Policy and Compliance provides vision and leadership for risk management disciplines including information security, privacy, records management, business continuity, and eDiscovery collections. This position is also responsible for the planning and implementation of information security tools and processes to prevent security breaches within a globally diverse multi-national organization. The ideal candidate will demonstrate strong leadership skills along with excellent oral and written communications, including communications with senior management. This person will also demonstrate a prior record of balancing IT risk with the need for the company to deliver on its goals and objectives. Responsibilities may include: The IT Information Security, Policy and Compliance Manager will be responsible for: Develop, implement and monitor a strategic and comprehensive IT risk management program to ensure the integrity, confidentiality and availability of corporate information and assets Manage the company's IT Policy and Compliance organization, including hiring, staff development, and performance management Develop, maintain and publish policies, standards and guidelines, and oversee training and awareness of these documents Develop and manage budgets, and monitor them for variances Work directly with the business units to facilitate IT risk assessment and risk management processes, and work with stakeholders through the enterprise on identifying acceptable levels of risk Provide periodic reporting on the current status of the information security program to the CIO, and to other senior business leaders and the board of directors as required Create a framework for roles and responsibilities with regard to information ownership, classification, accountability and protection Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls Ensure that company programs are in compliance with relevant laws and regulations and policies to minimize or eliminate risk and audit findings Coordinate among the IT Policy and Compliance team and other company risk management functions, including ethics, audit, legal and HR Manage IT security incidents and events to protect personnel, corporate assets, intellectual property, regulated data and the company's reputation Individual may travel up to 20% of time