Vice President of Information Security - PlanetArt

Company and Vision

PlanetArt’s vision is to be the leading seller of personalized and make-on-demand products worldwide. We provide consumers with unmatched tools and content and an unparalleled end-to-end customer experience that result in high-quality, meaningful finished products and memorable celebrations of life events.

The company’s brands include the popular FreePrints and FreePrints Photobooks apps and the industry leading SimplytoImpress card and stationery site, as well as Personal Creations, CafePress and ISeeMe! Visit www.planetart.com to learn more about our brands.

We have more than 500 team members across multiple offices, primarily in Calabasas CA, San Diego CA, Woodridge IL, Minneapolis, MN and Pleasanton, CA. We also have team members in two company-owned offices in China, as well as in Europe.

Job Overview

PlanetArt is looking for a Vice President of Information Security. We believe in protecting our businesses and customers and are looking for a leader to own the global information security strategy for PlanetArt. The Vice President of Information Security, reporting to the Chief Technology Officer and C-Suite, will ensure security requirements are consistently practiced, improve compliance with security standards and policies and own the design and enforcement of global cybersecurity standards. You will have a broad technical background, a solid grasp of e-commerce technologies and be the leading advocate for security and privacy in the company. Must be hands on and willing to dig in with the team.PLEASE NOTE: Candidates much be local to or willing to relocate to either the Calabasas or San Diego area as we operate on a hybrid work model (3 days onsite, 2 remote)

Requirements

What You’ll Do
Key Responsibilities

• Develop, implement, and own the strategic, long-term, comprehensive enterprise information security program for PlanetArt’s global business.
• Execute an effective Incident Response program and lead it for security incidents as they arise.
• Manage a secure code scanning and bug bounty program.
• Manage regular intrusion detection and vulnerability reporting and remediation practices.
• Partner with architects, infrastructure, application, and business teams to ensure that technologies are developed and maintained according to security policies and guidelines.
• Create and manage information security and risk management awareness training programs.
• Complete all 3rd party inquiry response and compliance reporting.
• Ensure that the security management program is compliant with applicable laws, regulations, and contractual requirements.
• Monitor and liaise with external parties to understand emerging threats and regulatory practices.
• Develop and manage information security budgets.
• Define network security, monitoring, and breach detection infrastructure.
• Own global compliance with PCI DSS, GDPR and CCPA and all data and security compliance issues.
• Oversee internal and external IT audits, scans, vulnerability testing, and mitigation.

What You Should Have
Skills, Qualifications, and Requirements

• 7+ years’ experience acting as a leader of information security in an ecommerce environment.
• Deep understanding of AWS technologies and architecture. Experience implementing security both on premise and in AWS or Azure.
• Inside-out knowledge of Microsoft security technologies, platforms, and patterns.
• Experience with security practices such as security incident response and risk management.
• Knowledge and understanding of relevant legal and regulatory requirements related to PCI DSS, GDPR and CCPA.
• A passion for cyber security.
• Excellent verbal and written communication skills with a wide variety of audiences including technologists, executives, business partners and IT team members.
• Ability to work collaboratively and cross-departmentally.
• Bachelor’s Degree required, BS in cyber security a plus.
  

What You Can Expect
Working Conditions

• Position requires regular interaction with team members through the following methods: in-person,
• phone, WebEx, Slack, or email.
• May require occasional travel.
• This is a hybrid position; employees are expected to be in the office three days per week (Monday,
• Tuesday, and Thursday) with the option of working remotely two days (Wednesday and Friday).

Benefits

The compensation for this position is $250,000 - $270,000 annual salary.

PlanetArt offers a comprehensive benefits package, including:

• Health, Dental, and Vision Insurance
• Life Insurance
• 401(k) with matching
• Excellent Work/Life Balance – Paid Time Off, Sick Days, Paid Holidays, and Floating Holidays
• Employee Product Discounts