Head of Security Engineering

We are hiring a Head of Security Engineering, reporting to the CISO this key leadership role will serve as the central point of contact for Security Engineering.

Your team identifies, deploys and operates information security solutions and associated processes.

You will liase with various business unit legal departments, technology teams and cybers teams throughout the enterprise.



* Serve as the central point of contact for Security Engineering.

The role identifies, deploys and operates information security solutions and associated processes.

The role requires process definition, playbook documentation, publishing company policies, training the team and advancing their careers, identifying third parties to supplement the program where necessary, and maturing the security program and associated technologies.

The role also includes liaising with the Business, Legal departments, Cyber Threat teams, and Technology teams across the enterprise.


* Develop and advance the Security Engineering function within the organization.

The role will work to secure our products and services, both in on-premise data centers as well as in cloud environments.

This includes performing technical assessments, initiating cross-functional workgroups to mitigate risk associated with identified issues, and providing training and awareness to cloud, development, and IT teams.

This function of the role is highly visible within the organization across all Companies and associated product teams.


* Identify and deploy technical infrastructure and cloud measures to improve our security posture.


* Keep up-to-date on changes in laws and regulations impacting the line of business through education programs/conferences, trade publications, agency websites and emails.

Promptly communicate changes to appropriate business units and/or executive management and other Verisk partners.


* Initiate and complete special project assignments, task force projects, or special ad hoc reviews or other assignments as needed


* Completes all responsibilities as outlined on annual Performance Plan.


* Completes all special projects and other duties as assigned.



* Advanced degree in Computer Science, Information Security, or a related field with a recognized industry certification (eg, CISSP, CISM, CCSP).


* Over 10 years of experience in information security, with at least 5 years in a leadership role.


* Manage a team of security engineers, providing guidance, mentorship, and performance evaluations.


* Lead the development and implementation of security policies, standards, and procedures to ensure the protection of organizational assets.


* Oversee the design and execution of security engineering strategies and controls to mitigate risks.


* Collaborate with other departments to integrate security measures into all aspects of the organization's operations.


* Conduct regular security assessments and reviews to identify vulnerabilities...