Senior Information Security Manager

Profile

The Senior Information Security Manager is responsible for the Firm’s IT security infrastructure, services and operations. The Senior Information Security Manager is responsible for the analysis, recommendation and deployment of information security systems according to best practices. The Senior Information Security Manager is responsible to lead the Firm’s information security program and compliance initiatives. The Senior Information Security Manager is responsible for oversight of the network and telecommunications systems and operations.
Job Functions:
Provides expertise in managing and operating information security tools and processes including security event management, anti-virus and malware defense and threat intelligence.
Serves as the overall IT security service owner, ensuring service requests and incident-related tickets are addressed according to internal service level commitments.
Manages large scale or long-term projects involving the design, development, testing, implementation, validation and ongoing support of new or existing information security systems.
Develops, implements and maintains information security strategies, policies and standards.
Develops effective procedures to regularly evaluate threat intelligence and create actionable directives.
Develops analysis techniques to support common and unique use-case monitoring against security indicators including device logs, network intrusion sensors, host intrusion indicators, and web filters/proxy (candidate must have technical skills and deep understanding of various log management tools).
Produces a monthly executive threat brief to include relevant industry and company-specific threats.
Candidate must maintain security operations metrics and leverage them to drive changes in defense and monitoring; metrics must also support senior management reviews.
Owns and updates the cyber incident response plan and playbooks.
Works closely with IT department to develop security requirements for servers, workstations and mobile devices.
Monitors security vulnerabilities discovered in IT systems and web applications; ensures a process is developed and followed to support the system/app owner’s timely remediation.
Assesses discovered vulnerabilities for true potential impact in an effort to prioritize the remediation of the highest risk items.
Partners with CIO and other stakeholders to improve security procedures, IT processes, and the security of existing systems.
Communicates with other departments to report and resolve IT security issues.
Ensures that all IT team members follow industry standard security ‘best practices’ and SOPs are written and followed.
Works with IT and other departments to develop technology and service roadmaps for all areas of accountability.
Partners with CIO and other stakeholders to understand and ensure data compliance mandates, including owning any related compliance systems and processes.
Researches and evaluates new technologies. Identifies and recommends solutions to make security operations more efficient.
Manages vendor relationships. Negotiates contracts and coordinates contracted activities with third party vendors.
Prepares annual capital and expense budget recommendations for IT security systems.
Effectively communicates with stakeholders at all levels of the organization.
Responds to client security questionnaires and coordinates required audits working closely with the CIO.
As the incident leader, ensures 24x7 response to cyber-related incidents.
Oversees the Firm’s Cisco network and voice systems, and provides 24x7 on-call support and problem triage for network and voice services.
Supervisory:
Manages and coordinates activities for network and information security staff including administering assignments and distribution of work.
Hires, trains and develops network and information security staff.
Handles general personnel problems and provides timely, effective and appropriate counseling to employees with performance/attendance issues.
Oversees the evaluation and annual performance reviews of assigned staff.
Maintains accurate vacation and attendance records for assigned staff.
Essential Management Competencies:
Delegates, coaches, encourages, and motivates staff to attain their highest levels of achievement, productivity, and work satisfaction. Identifies and supports all training and development needs and succession planning efforts.
Uses leadership skills to establish effective working relationships, encourage teamwork, and build consensus in order to meet or exceed departmental standards and Firm objectives.
Maintains active lines of communication within and between departments to share knowledge and support collaborative efforts, organizational change, and goal achievement. Develops a committed, competent, and professional staff that works in an atmosphere of mutual trust and respect.
Maintains current knowledge of trends and developments affecting the department and the Firm, promotes innovative thinking and creativity, and empowers others to exercise sound decision-making and good judgment.
Manages change occurring within the department and collaborates with other members of management to ensure organizational change is effective, efficient, and aligned with the Firm’s security goals.
Qualifications:
Bachelors degree in Computer Science or related field.
CISSP and Cisco certifications strongly preferred.
7 years of progressive experience in managing information security systems.
5 years of experience in managing an information security and/or network team.
Advanced skill level in security and network troubleshooting with demonstrated capability in solving new and complex problems.
Strong knowledge of and experience in information security and monitoring systems.
Proven ability to develop and train staff.
Demonstrated ability to set priorities and complete diverse assignments on a timely basis.
Superior oral and written communication skills, including experience in drafting policies and SOP’s.
Physical Requirements:
Must have minimal physical mobility. Position may occasionally require standing, walking, reaching, and lifting up to 15 pounds.
Must have the ability to operate equipment such as a computer and copy machine.
Must have the ability to communicate clearly and to read and follow detailed instructions.
Must have the ability to prepare assorted documents and other related materials.
Must have the ability to work in stressful conditions under time deadlines.
To apply, please click here

Company info

Sign Up Now - WashingtondcCrossing.com