Engineering Technician IV

The IT Senior Manager, Security and Compliance role is to organize and oversee all cyber security operations for the organization, IT policy compliance, and the IT PMO process. The candidate for this position will develop and implement policies and procedures to maintain security standards. This includes developing and implementing security policies, protocols, and procedures. Provide technical direction for implementing cyber security applications and protections. Perform internal audits to ensure compliance across systems and processes. Develop and manage the IT project management office (PMO), change management, and problem management process.

ESSENTIAL FUNCTIONS:

• Provide information security awareness training to organization personnel
• Creating and managing security strategies
• Oversee information security audits, whether by performed by organization or third-party personnel
• Manage security team members and all other information security personnel
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Implement and oversee technological upgrades, improvements and major changes to the information security environment
• Serve as a focal point of contact for the information security team and the customer or organization
• Communicate information security goals and new programs effectively with other department managers within the organization
• Lead change management and problem management (RCA) efforts
• Ensure IT projects are completed to established PMO methodology
• Ensure all organizational wide IT processes are audited according to the IT audit policy

Required Skills

• An understanding of computer code, and in particular what dangerous code such as virus or malware looks like and how to deal with it
• Background and knowledge of risk assessment technologies and methods
• Understanding of computer forensics and security breach protocols
• The ability to perform security risk assessments and evaluations
• Knowledge of cybersecurity best practices (and a record of proving how to stay current on industry changes
• Experience with developing and implementing security procedures and policies
• Understanding of anti-virus software, firewall maintenance, and hacker detection

Required Experience

• BA, BS, MS or a combination of degree, certifications and 10+ years of demonstrable experience with various sized projects and methodologies.
• 10 years plus leading teams of IT analysts (network, security, developers, etc.)
• 5 years plus experience working within an IT Infrastructure as a Network Administrator or Engineer
• 5 years plus experience with designing / recommending IT security solutions
• 5 years plus experience with managing multiple firewalls; routers, switches and VPN
• Experience leading certification in one or more organization security accreditations (i.e. ISO27100, SOC)
• 5 years plus experience with performing analysis of information system activity and security problems to discover and prevent systematic errors; recommends security system design changes/enhancements for improved systems availability and performanceDemonstrated experience with security experience at an enterprise level
• Any combination of experience and the following certifications a plus (i.e. CCNA, CCNE, SEC+, Net+, CISSP, CISM, PMP)
• The ideal profile of a candidate would include progressive evolution through small, medium organization activity progressing to large enterprise

Qualifications:

• An understanding of computer code, and in particular what dangerous code such as virus or malware looks like and how to deal with it
• Background and knowledge of risk assessment technologies and methods
• Understanding of computer forensics and security breach protocols
• The ability to perform security risk assessments and evaluations
• Knowledge of cybersecurity best practices (and a record of proving how to stay current on industry changes
• Experience with developing and implementing security procedures and policies
• Understanding of anti-virus software, firewall maintenance, and hacker detection