Job Details

The Director, Security Operations leads the Tableau Security Operations teams in working cross functionally with our business, technical, and product security teams to refine and implement our strategy. Ensure the Tableau security monitoring, detection and response postures are robust and exceed all applicable standards. Drive security monitoring, detection and response initiatives to clearly identify control objectives and work with technical teams to meet or exceed these objectives using automation where possible. Identify current and emerging threats to our systems and environment proactively, preventing incidents where possible and reactively managing them as necessary.

Responsibilities

• Leadership and management of Security Monitoring, Detection and Response teams including attracting, hiring, developing, and retaining team personnel, workload assignment, process development, and light project management
• Be a critical contributor to the Tableau Security Program and Strategy, including direct responsibilities across the business in both Tableau’s Corporate, Development and Online (SaaS). environments.
• Lead and innovate solutions that fit Tableau’s technical/business needs while simultaneously aligning with Salesforce policies and processes.
• Help to develop Standards and Processes for the Tableau environment
• Participate and lead, when necessary, Executive Security reviews
• Ensure the team is ready to support information security related technologies, such as firewall configuration, certificate management, handling data confidentiality issues, monitoring and, responding to emerging threats
• Consult with Product Development, Engineering, and Operations on technical security issues
• Supervise the implementation of technical solutions mapping to contractual requirements and supporting audit programs such as, SOX, SOC, and ISO27001
• Diagnose internet/extranet/cloud security, intrusion attempts, incident response, and legal investigations
• Ensure proper control and telemetry systems are built or improved to support the Tableau Security Program
• Assist the Sales team by occasionally working with prospective customers during their security assessments as part of the sales process
• Continuously improve our Security Monitoring, Detection and Incident Management processes and systems, with a focus on automation and alignment with Salesforce

Qualifications

• Strength in leading and managing teams of dedicated security professionals working in a complex organization with a high growth rate
• Ability to generate trust by communicating the Tableau security posture to executives, customers, stakeholders, and auditors
• Strike the right balance between security, cost, complexity, operability, and end user experience when approving solutions for security needs
• Prior hands on experience with security technologies commonly leveraged to support a large- scale, multi-platform enterprise environment (system and/or security support for VMWare,
• Windows, Unix, containers; network security services; Firewalls, Proxies, IPS/IDS, VPN, KMS,
• Identity Management systems, SaaS integrations)
• Proven ability to perform analysis, and prepare documentation which establishes business objectives, problems, options, and makes recommendations
• Experience analyzing network, event and security logs, and/or IDS alert logs
• Proven project management and organizational skills, specifically managing multiple concurrent projects
• Excellent analytical, problem solving and decision-making skills, applied with a solution focused attitude
• Excellent written communication skills, demonstrating the ability to write with purpose, clarity, and accuracy
• Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance and professionalism
• Excels in cross team collaboration, when possible building consensus and when necessary aligning people and teams behind unpopular but necessary decisions
• CISSP and/or similar security related certification(s) required
• Hands-on experience installing, configuring, and supporting security related hardware and software such as Enterprise Anti-Virus/Malware, Data Loss Prevention, File Integrity Monitoring, Security Auditing, and Vulnerability Management Expertise with Encryption technologies and best practice Key Management systems and procedures
• 7+ years working in an enterprise/information security support role
• 7+ years IT infrastructure proficiency and experience that could include one or more of: Encryption, Tokenization, Forensics/eDiscovery, Penetration Testing, Web Application Firewalls, Firewalls, Proxies, Routers, VPN
• Familiarity with current legal and regulatory requirements around information security and privacy, including PCI, SOX, HIPAA, GLBA, GDPR, FISMA/FedRamp, etc.