Director of Security

Company Overview

Founded in 1986, Asset Living is a true third-party property management firm with decades of experience delivering exceptional value to partners across the nation. As a leader in third-party property management, Asset Living is the fourth largest in the country (National Multifamily Housing Council’s Top 50) and remains the No. 1 third-party student housing property manager in the U. S. for 11 years in a row (Student Housing Business). With over 36 years of experience, Asset Living’s growing portfolio includes a multitude of properties across the country that span the multi-family, single-family home rentals, affordable housing, build-to-rent, active adult, and student housing divisions. Asset Living presently manages a portfolio consisting of approximately 175,000+ units and 125,000+ beds. Asset Living is a family made up of diverse backgrounds, unique ideas, and distinct personalities. Recognized as one of the nation’s Best and Brightest Places to Work, professionals join Asset Living because of its reputation as the most trusted partner in real estate, workplace culture, and growth opportunities. Asset Living is a member of The Institute of Real Estate Management (IREM) and is recognized as an Accredited Management Organization (AMO).

Director of Security

The Director of Security reports functionally to the Chief Product Officer, prepares the security strategy for their respective entities, and works with the CPO and their operational management to set the annual objectives for implementing Security policies. The Head of Security will also take over IT support functions as well.

Essential Duties & Responsibilities

• Maintaining Information Security Policies and ensuring their applicability
• Identifying Information System Security related operational risks along with Business Line
• Reporting regularly to his supervisor, to the Management Committee of his Business Line, particularly in respect of any security risks or incidents observed, progress on security action plans, and the implementation of Information Systems Security governance
• Following up on the implementation of the recommendations of internal and external control functions on Information Systems Security
• Adapting reference documents to Information Systems Security requirements when necessary
• Helping business entities specify their security requirements & select appropriate security services
• Assisting with project security risk analyses, verifying the quality of these analyses, and having their findings validated by the business entities
• Proposing reactive and proactive security solutions of an organizational or technical nature
• Responding to security incidents, and cybercrime attacks
• Informing operational management and the business of security incidents and participating in crisis operations when a severe incident affects Information Systems Security or if a risk situation is discovered. Executive Management shall be informed of high-severity happenings.
• Following up on security incidents, overseeing their analysis, identifying deviations from security rules, and assist necessary to resolve the incident
• Ensuring that the Information Systems Security resources implemented are sufficient and appropriate for the threats identified and undertaking the actions that are necessary to prevent future threats
• Adapting the Information Security Policies to their center’s technical requirements and contributing to the acquisition of the skills necessary to develop, implement and operate the technical security systems and tools for which they are responsible
• Reporting regularly on security, contributing to their visibility on security and alerting them if a risk situation or incident is observed.* Managing the IT Support functionality that involves end-user desktop and network support

Education & Experience

• 10 to 15 years of experience in Information Security / IT Security.
• BS/MS in Computer Science, Computer Engineering, or a related technical field.
• Excellent knowledge & relevant experience in security domains related to one or more of the following security themes: Vulnerability Management, Id, entity and Access Management, Data Security & Leakage Prevention, Project risk assessment (risk assessment from applicant / or infrastructure security perspective), EndPoint Protection.
• ITIL knowledge
• Intermediate understating and the following themes: Infrastructure Security (Perimeter Security, Network Solutions, hardening, etc.), Security of cloud-based services/ applaud actions, and Experience working with new /disruptive technologies helpful be applicable.
• Excellent Communicator/written / written). Capacity to influence and convince.
• Capacity to manage projects and governance associated.
• People Management: ensure proper skillsets are developed and maintained within the team. Ensure atria is good at a reasonable figure: no impact on deliverables (BAU or projects).
• Stakeholder Management: Ensure connections are well established with Management Committee (awareness spread, Information Security risks are known and accepted, etc.)