Information Security Risk Director, GoDaddy

• Do you want to be an Information Security Leader at GoDaddy?
• Can you solve large scale and cross-company issues, while ensuring that partnership with the development and operational communities remains front of mind?
• You must be comfortable with communicating to stakeholders, performing security assessments and prioritizing security risks, creating/presenting high-quality deliverables
• Experience in Secure Development Lifecycle and Shift Left with a Security by Design methodology
• 8+ years of progressive security engineering experience with expertise in multiple security domains such as Security Architecture, Cryptography, Network Security, Cloud Security, Mobile Security, Compliance, and Web Security
• Knowledgeable in threat modeling and risk management
• Ability to lead offensive security testing, including penetration testing and red team exercises
• Experience with building and/or managing security assessment and risk management programs
• Deep technical understanding of security assessments and risk management

Desirable

• GoDaddy’s Information Security Org is looking for a Director to join our organization
• GoDaddy is looking for a Director to utilize their hands-on technical skills, strong leadership abilities, and an eagerness to build enterprise wide security risk assessment programs
• Build and manage an enterprise-wide security assessment program that includes application, network, and infrastructure security assessments
• Join forces with SRE and development teams to find new and creative ways to reduce the occurrence of vulnerabilities at scale
• Manage a team of security professionals performing security assessments
• Launch campaigns to perform security assessments and help mitigate security risks across the company
• Identify security standards and requirements for embracing new and emerging technologies and platforms
• Partner with business collaborators to help define and prioritize security initiatives and investments
• Build evaluation methods and performance indicators to measure the efficiency of security functions and capabilities
• Operationalize continuous testing and validation of security controls
• Partner internally and externally with our audit teams to drive gap assessments, cybersecurity, and other audit requirements to support the organization