Manager - Cyber Security Services

Description

CRST The Transportation Solution, Inc.is delivering promises and driving success so we can all have what we need to live and thrive. We need talented individuals to help us bring this vision to life.

WHO WE ARE

Headquarters: Cedar Rapids, IA

Position Location: Cedar Rapids, IA; Fort Wayne, IN or Amherst, NY

CRST'S Information Technology

CRST IT professionals' power CRST's operations through secure and reliable technology. They manage systems, data, and innovation that keep our people and customers connected.

The Role

The Manager - Cyber Security Services defines and manages the organization's IT security program in collaboration with IT and business stakeholders. This role leads the information security team, oversees the development and implementation of security policies, and ensures companywide protection through audits, incident response, and employee training.

Schedule: Monday - Friday

Travel: Minimal to other sites as needed.

Compensation: $99,750 - $150,000 is the full starting salary range (Pay Bi-Weekly) This pay scale represents a good faith estimate of the salary/hourly wage range the company reasonably expects to pay upon hire for this position: A final offer amount will depend on factors such as prior relevant experience, skills, and location

Benefits: Comprehensive package including medical, dental, and vision coverage; prescription drug and telemedicine services; company-paid life and disability insurance; retirement savings with company match; paid time off, holidays, and parental leave; plus additional voluntary benefits and employee discounts.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• IT Security Program Leadership: Works with IT and business stakeholders to define and evolve an effective IT security program

• Information Security Team Management: Manages the information security team and partners with IT leaders to implement all elements of the security program, including risk management, vulnerability scanning and patching, data classification, change control, SIEM processes, and security documentation and policies

• Security Standards Development: Creates and maintains information security standards based on industry best practices

• Technical Security Expertise: Provides information security expertise in the technical design of data networks and infrastructure software

• Secure Application Development Support: Offers information security guidance and instruction to software application developers

• Policy and Procedure Governance: Establishes companywide information security policies and procedures

• Security Audits and Testing Oversight: Manages security audits, threat assessments, and security testing activities

• Incident Response Leadership: Leads the response to network and software system security incidents

• Security Awareness and Training: Develops and manages companywide employee security awareness training

• Architecture Review Participation: Contributes to infrastructure and application architecture reviews

• Additional Responsibilities: Performs other duties as assigned

• Attendance and Reliability: Maintains regular and reliable attendance

REQUIREMENTS:

• Education: 4-year degree or combination of experience and education

• Experience: 5 years cyber security experience with a portion in leadership

• Knowledge: Familiar with NIST and CIS frameworks. Utilizing tools that align with vulnerability management, GRC, and risk management.

• Skills: Very personable and able to communicate well. Report writing and dashboard creation skills to articulate the cyber security program

PREFERRED QUALIFICATIONS:

• CISSP or CISM

• Microsoft Cyber Security Architect Certification

• 5 years of experience leading a cyber security program

• Governance, Risk and Compliance experience.

CRST CORE VALUE:

Safety at the Core of All We Do - Integrity in Every Decision and Action - Commitment to the Success of Employees, Customers, Agents, Contractors, and Communities

EEO STATEMENT:

CRST The Transportation Solution, Inc. is an equal opportunity employer. We consider all qualified applicants for employment without regard to age, color, creed, disability, genetic information, military or veteran status, national origin, race, religion, sex, or any other status protected by applicable federal, state or local laws.

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws.

For further information, please review the Know Your Rights ( notice from the Department of Labor.