Senior IT Security Manager
The Senior IT Security Manager manages outsourced SOC, Artic Wolf Networks, and is the relationship owner for other outsourced/third party relationships relating to IT security. They will ensure appropriate application of risk management methodologies, security products, and technologies to protect the company's systems and information.
$100,000.00 yearly
Full-time
Remote
Essential duties and responsibilities include the following:
- Manages IT and company compliance issues. Produces detailed documentation including data flow diagrams, logical diagrams, and physical diagrams as required.
- Provides identity management and access control expertise for systems, networks, applications designs and architectures.
- Work across both Network, Infrastructure and Systems Administration functions to implement controls and best practices.
- Works as a liaison between IT and Operations Technology to ensure full and complete implementation of security controls, standards, and policies.
- Assists IT and Operations Technology with remediation planning and implementation.
- Establish and tests new and existing internal controls.
- Develop prioritized initiatives to address findings from both internal testing as well as from SOC.
- Work with Development to define and adhere to secure coding practices.
- Maintain all cybersecurity, IT Risk and Compliance, cyber insurance and other key documents (SSAE 16, SOC 1, WISP, Disaster Recovery, et. al.).
- Assists with development of the companys Asset Management processes and procedures.
- Creates KPIs, metrics, dashboards and reporting to measure the performance of the security organization.
- Commitment to safety begins with management. Managers and frontline supervisors are accountable for creating and maintaining a culture of Safety and assuring a safe work environment.
Apply RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring. Develop, review, and maintain secu... Show more
Education and/or Experience
Bachelor's degree in information technology or equivalent plus 5+ years of related work experience with IT Risk Management, or an equivalent combination of education and work experience; Good understanding of risk management principles, regulatory requirements, and industry best practices; Good understanding of General IT Controls, and Data Privacy Regulations; previous auditor experience a plus; Good understanding of IT systems and controls including Web systems, e-commerce, data centers, network infrastructure, patching, access controls, databases, cloud systems etc.
Skills and abilities
- Analytical skills and the ability to organize work in a logical, thorough, and succinct manner.
- Flexibility to adapt to changing assignments and ability to effectively prioritize.
- Effective with written and verbal English communications at all levels, providing compliance guidance to project teams, management, and business partners.