Information Security Program Manager (Hybrid)

Information Security Program Manager

Barr is seeking an experienced information security program manager to join our Minneapolis, Minnesota, team. In this hybrid role, you will lead Barr's information security program and work cross-functionally across teams, focusing on continuous improvement as the security threat environment evolves. This is a hands-on role and reports to the director of information systems. A successful person in this role is an analytical problem-solver with exceptional attention to detail and a passion for continuous learning. They are highly organized and leverage their technical expertise to implement robust security measures that safeguard system integrity and reliability. They also dig deep when needed, maintaining a broad strategic perspective on the business. The ideal candidate has a high degree of self-initiative, proactively leading security improvement and governance efforts, and enjoys collaborating with technical and non-technical colleagues, always with a client-service mindset.

Key responsibilities:

• Security program administration and maintenance: oversee and continuously improve Barr's information security program.
• Cybersecurity subject matter expert: provide insight into developing and executing the company's security strategy.
• Security governance and compliance: develop and maintain information security policies, standards, and procedures to ensure alignment with industry best practices and frameworks.
• Crisis management: plan, prepare for, and respond to security incidents or breaches, helping to coordinate containment, investigation, and recovery efforts to minimize damage and downtime.
• Security monitoring and optimization: continuously monitor the IT environment for signs of security issues or vulnerabilities using appropriate tools and resources.
• Escalation-level technical support: serve as the first escalation point for potential security incidents.
• Vulnerability and patch management: lead proactive vulnerability management by conducting regular security scans and ensuring that processes and automated systems for the timely application of patches and/or upgrades are effective.
• Documentation and training: develop and maintain internal security documentation and provide technical training and guidance for IT staff and end users on security best practices.
• Audit support: maintain required documentation, perform internal security testing, and coordinate responses to audit findings or external audit requests.
• Security assessments: respond to external security questionnaires, assessment tools, and client security surveys.
• Program metrics and continuous improvement: track key security program metrics and use these insights to drive ongoing program improvements.

Hybrid: a hybrid work arrangement may be considered for this position. A hybrid work arrangement refers to splitting time worked between a Barr office and a home office. This position is based out of Barr's Minneapolis, Minnesota, office. Travel requirement: ability to travel to other offices and sites across the US and Canada if necessary.

Required core competencies:

• Education: bachelor's degree in computer science, information technology, or a related field or equivalent practical experience.
• Experience: 10+ years of related IT infrastructure or information security experience.
• Working knowledge of corporate network environments and technologies such as VMware virtualization, Microsoft Windows Server, Active Directory, and Group Policy management.
• Experience with cloud platforms such as Microsoft Azure, Microsoft 365, or Amazon Web Services (AWS) administration and support.
• Experience working with SIEM/SOC tools, including follow-up investigations and response.
• Familiarity with scripting and automation tools (e.g., PowerShell, Python, Ansible) for system administration or security automation.
• Willingness and ability to perform off-hours administrative changes and respond to emergencies or urgent issues outside of regular hours if needed.
• Must be legally authorized to work in the United States without the need for sponsorship by Barr, now or in the future.

Compensation: anticipated range of $125,000-$150,000 annually. Compensation will vary based on relevant experience, education, skill level, and other compensable factors. Employees in this position may also be eligible for a discretionary cash bonus based on team and individual performance. This position is classified as exempt (salaried) under the Fair Labor Standards Act.

Benefits - what we offer:

• Competitive, affordable insurance plans: medical, dental, vision, life, disability, accidental death insurance, and flexible spending accounts for medical and dependent care.
• Retirement benefits: 401(k) retirement savings plan with company contribution and an Employee Stock Ownership Plan (ESOP) with company contribution in Barr stock.
• Profit distribution: Barr has a "no retained earnings" model and distributes all profit to our employees through our annual bonus distribution plan, ESOP, and dividends to shareholders.
• Professional development benefits: annual time and expense allowances, mentorship program, and many internal training opportunities.
• Work/life balance: paid time off, holidays, overtime for non-exempt/hourly staff, and compensatory time for exempt/salaried staff (time off or pay for extra time worked), paid family leave.
• Wellness focus: ergonomic analysis and equipment, Personal Protective Equipment allowance, wellbeing-focused educational opportunities.

About us - why choose Barr:

At Barr, you'll join a community of engineers, scientists, and professionals who will help you achieve your ambitions and build a meaningful, rewarding career. You'll serve as a trusted advisor to clients who value Barr's tailored solutions and commitment to exceptional service. As part of our employee-owned firm, you'll contribute to a culture of commitment and camaraderie where staff can thrive as professionals. We value diverse perspectives and experiences and believe an inclusive workplace is critical to our success.