Fulltime : Director Network Security

Must be US citizen or Green Card holder.

Job Description :

The Director Network Security plays a critical strategic role in protecting the U.S. Cellular brand and securing the U.S. Cellular national network from significant revenue/data loss. This vital position will provide critical leadership and overarching vision on security architecture and business assurance activities. Serves as company’s expert in the field of security technology.

Scope of responsibilities include:

Delivery of Network Security Engineering service and operations

Security assessment functions related to carrier infrastructure

Leadership, evaluation and oversight in the implementation of new technologies, policies, and procedures for optimal business network operations

Relationships management with internal and external business partners as necessary to provide security assurance against cyber-attacks, to include denial of service campaigns, web defacement, unauthorized access, etc.

Guidance and control of all projects and activities which are necessary in securing large, complex Enterprise and mobile service provider networks.

Preparation and management of annual operating capital budget

Essential Duties and

Key Responsibilities:

Directs Security Operations to ensure key performance indicators are met and threats/vulnerabilities are mitigated. This includes Security Incident & Event Management as well as daily threat analysis.

Directs Security Engineering this includes oversight of the security perimeter architecture and design, third party extranet connectivity design, network segmentation, and Intrusion Detection/Protection System evolution.

Directs Security Assessment which includes assessments of critical carrier infrastructure as well as PCI relevant infrastructure. The assessment function includes penetration and application testing as well as verification of remediation of findings.

Develop strategies for securing assets, customer services delivery, and regulatory/audit compliance for approval by senior executives, TDS, and USCC board. Develop strategic security priorities either alone or with executive direction.

Represent the company at industry conferences and represent the department at company meetings. Serve as a spokesperson for company security policies to all levels of the organization. Lead and/or participate in departmental leadership initiative teams.

Responsible for all USCC geographical locations concerning all elements of network security, including securing informational asset infrastructure, regulatory compliance and audit (Sarbanes-Oxley, PCI, CPNI, and others), security of customer-facing services, security elements of cross-functional multi-departmental company initiatives and projects, as well as securing all Internet, Extranet, and Virtual Private Network connections

Prepare, review, and manage annual operating, capital budget plans and priorities for the Network Security team. Ensure the budgets meet expected deadlines and corporate objectives for projected growth.

Continue to evolve the reference architecture for the Enterprise and mobile service provider security infrastructure, while ensuring the protection of customer data

Serve as the final escalation point for all service provider network security operations issues with a degree of quality that results in absolute root-cause determination and drive vendor partners to provide quality assurances by requiring immediate bug fixes, software updates, etc., as necessary to ensure an Ideal Customer Experience at all times.

Manage all elements of vendor negotiations and contractor relationships

Provide leadership and guidance through example, coaching, and mentoring. Create an environment that encourages engineers to expand their horizons, learn new processes, and grow their technical and leadership skills. Plans for human resources, including interviewing, hiring, disciplining, development/career planning and setting priorities for all team members.

Ensure that the security infrastructure is designed to prevent revenue and data loss, to include inappropriate and/or unauthorized disclosure of Company and/or Customer information; and other cyber activities that…