VP, Cybersecurity – Fully Remote, US

Accommodations Plus International (API) is the global leader in crew accommodation and travel logistics, powering over 18 million crew room nights each year for 100+ airlines and travel operators worldwide. Our Global reach ensures that airline crews are rested, transported, and connected so global aviation runs on time.

We are seeking a Vice President of Cybersecurity to lead the development and execution of our enterprise-wide cybersecurity strategy. This is a high-impact and hands-on role – perfect for a seasoned security leader who enjoys rolling up their sleeves and being involved in technical execution. As the cybersecurity function grows, this role will have the opportunity to build out and manage a team.

From designing secure systems to responding to threats in real time, you’ll be the go-to expert protecting our IT systems, applications, and data. A blend of technical and interpersonal skills are needed to influence all levels of the organization and strengthen our security posture.

Success in this Role

Develop and implement a comprehensive security strategy aligned with business goals
Minimize security incidents and ensure proactive defense mechanisms
Establish compliance with standards to meet client and business needs
Cybersecurity awareness and best practice compliance is actively practiced across API

What You’ll Do

Own and evolve enterprise-class security systems
Implement and maintain compliance with multiple standards (ISO27001, SOC2 TYPE 2, GDPR & PCI-DSS)
Align standards, frameworks and security with overall business and technology strategy
Identify and communicate current and emerging security threats
Design security architecture elements to mitigate threats as they emerge
Work with software applications leaders to ensure software applications meet highest security best practices and address OWASP, SonarQube and Qualys findings.
Create solutions that balance business requirements with information and cyber security requirements
Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
Provide training and foster awareness of security best practices to company team members
Conduct regular system tests and ensure continuous monitoring of network and applications security
Establish and test disaster recovery procedures and conduct breach of security drills
Promptly respond to all security incidents and provide thorough post-event analysis

What You’ll Bring

Minimum Qualifications

15+ years of experience in cybersecurity, security architecture or computer network defense or equivalent
Strong, proven skills at indirect leadership through influence to ensure all employees are practicing best in class security management
In-depth knowledge and experience with relevant National Institute of Standards and Technology (NIST) standard, ISO27001 specifications, SOC2 TYPEII attestation and PCI-DSS certification
Direct experience handling advanced cybersecurity incidents and associated incident response toolsets
Proven subject matter expertise in computer forensics, incident response and follow-up, intrusion analysis, malware analysis, and security engineering
Demonstrated ability to identify and address risks associated with business processes, operations, information security programs and technology projects
Deep understanding and practical use of security principles, architecture and emerging technologies
Solid understanding of Windows, *NIX, and Cloud Security (AWS and Azure)
Managing the design and implementation of digital security solutions, including continuous monitoring and improvements to those solutions
Managing third party suppliers and partners of security related tools and services
Pragmatic hands-on knowledge and experience with security considerations of cloud computing, including data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, Advanced Persistent Threats (APTs), data loss and Denial of Service (DoS) attacks
Demonstrated experience in identity and access management (IAM)
Prior management of an enterprise-level incident response team and security operations center

Preferred Qualifications

Experience with ethical hacking and penetration testing
Advanced degree in cybersecurity or related fields
Certified Information Systems Security Professional (CISSP)
Certificate of Cloud Security Knowledge (CCSK)
Certified Ethical Hacker (CEH)
Certified Information Systems Auditor (CISA)
SANS Institute related certifications

Education

Undergraduate degree in computer science or computer or network engineering or related field

What’s In It for You

Health, dental, and vision insurance
Competitive 401(k) matching
Paid Time Off
High-growth oriented environment with results-driven team
Direct influence over the future of our cyber security strategy

Compensation

The good faith compensation salary range for this position in the NY Metro area is $190,000 - $210,000 USD, adjusted nationally for geographic area. Commensurate with experience.

Who We Are

API is the global leader for crew accommodation solutions, and we are changing the way businesses manage travel. Our technology platform streamlines the entire crew planning process, making day-to-day operations more efficient and elevating the crew layover experience. API’s proprietary technology, mobile solutions and our experienced team are positioned to offer our clients a complete, end-to-end platform that integrates seamlessly into their process. We are looking for dynamic, creative, and tech savvy individuals to join our team. If you are passionate about hard work, providing impeccable service, technology, and solutions to our clients then API may be a great fit for you!

Other Duties

Duties, responsibilities and activities may change at any time according to business needs.

The performance of additional responsibilities if you are designated as a Data Protection Champion (DPC), Senior Information Risk Owner (SIRO) or Information Assurance Accounting Officer (IAAO).

Work Environment

This position operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand, walk; use hands to finger, handle or feel; and reach with hands and arms.

AAP/EEO Statement

Accommodations Plus International is an Equal Opportunity Employer that does not discriminate on the basis of actual or perceived race, creed, color, religion, alienage or national origin, ancestry, citizenship status, age, disability or handicap, sex, marital status, veteran status, sexual orientation, genetic information, arrest record, or any other characteristic protected by applicable federal, state or local laws. Our management team is dedicated to this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, employee activities and general treatment during employment.

VP, Cybersecurity

Job Type