Senior IT Security Manager - #2999

Typical responsibilities include:

• Monitor all enterprise components for security threats and address any incidents.
• Build security best practices to strengthen the organization's security posture.
• Provide guidance to all internal IT teams to identify and remediate security gaps.
• Build security considerations into a developing Business Continuity plan.
• Maintain all security tools and technologies and introduce new relevant tools.
• Monitor policy compliance as the organization adopts NIST 800-171 guidelines.
• Work company-wide to reduce risk and ensure security awareness and prominence.
• Create and audit policies and controls while continuously striving for improvement.
• Create a security incident response program within IT then extend it enterprise wide.
• Regularly report security incidents and security program progress to the V.P. of IT.
• Develop and mature a company-wide Governance, Risk, and Compliance (GRC) program in partnership with the existing GRC Analyst, including practical security policies, risk registers, control ownership, evidence collection, audit readiness, vendor/security reviews, and executive-level reporting aligned to NIST 800-171 and business requirements.
• Ensure compliance to all relevant Information Security controls required by local laws, regulations, and contracts.
• Maintain a safe working environment.

Education:

• Bachelor's degree in Information Technology with a focus on Cybersecurity or a related field.
• Certifications in CISA, CISM, or CISSP preferred.

Skills/Expereince:

• Manage and manipulate multiple and often shifting priorities.
• Maintain a high level of technical subject matter expertise.
• Working knowledge of Server Infrastructure in a Windows Server environment
• Vast familiarity with Networking concepts to guide current Network team security improvement efforts
• Professional yet patient when driving IT Security awareness and enforcing policy throughout the organization