Information Security Manager

Information Security Manager

We are searching for an Information Security Manager to join a great team with an industry-leading client with the intent for continued growth. Our enterprise-level client is looking for someone to oversee the Information Security for the entire organization, being able to understand the business implications of all aspects of Information Security. This company currently has over 200 locations and aims to double that number in the coming years. If you are looking to take the next step in your security career, please reach out to learn more.

Minimum Requirements:

• 4+ years of relevant experience.
• In-depth knowledge of IT architecture, governmental compliance, data protection, and privacy, information classification, core applications and critical infrastructure operations and support, business continuity/disaster recovery, enterprise risk management.
• Have a full understanding of the current cybersecurity threat landscape as well as best industry practices.
• Ability to lead and develop a team
• Excellent written and oral communication and presentation skills
• The ability to communicate technology efforts in a way that "non-technical" leaders can quickly understand the concept and engage in high-level management discussions to make decisions leading to the best technical solution for the business.
• A history of developing metrics to measure process impact and control effectiveness.

Preferred Experience:

• Experience using SIEM and SOAR technologies.
• Experience using Privileged Access Management (PAM) systems.
• Experience with Multi-factor Authentication (MFA).
• Enterprise experience with Cisco and Palo Alto Firewall Security.
• Experience with SOC2 and ISO27001.
• Experience with M&A including the rapid assimilation and rationalization of disparate technologies.
• InfoSec Certifications are a plus (e.g. CISM, CISSP, CEH, etc.).

Responsibilities:

• Lead the IT Risk Management strategy, program, and all associated services.
• Identify needs for improvement, determine the necessary course of action and present solutions to CIO to get budget approval
• Ensure compliance with regulatory and internal requirements
• Implement risk-based controls that are full auditable
• Develop and produce scorecards to measure, monitor and report on IT Risk posture and control effectiveness across all levels.
• Enhance the technologies and processes used to mitigate security risk
• Conduct security and risk due diligence related to acquisitions, divestitures & joint ventures.
• Work with 3rd parties to arrange risk assessments
• Serve as subject matter expert, implementing new developments in Information Security technology that can enhance the organization's ability to do business.
• Stay up to date on evolving IT Security threats and trends.