Manager - Information Security

Key Responsibilities:

Security Strategy & Awareness

• Develop and lead security awareness programs for employees.
• Maintain and report on the organization's overall security posture to leadership.

Risk Assessment & Mitigation

• Conduct regular risk assessments to identify vulnerabilities and threats.
• Evaluate security risks associated with projects, vendors, and technologies.
• Recommend and prioritize security measures to mitigate risks.

Incident Response & Compliance

• Lead responses to security incidents (identification, containment, eradication, recovery, post-incident analysis).
• Develop and maintain incident response plans; conduct tabletop exercises.
• Collaborate with legal, communications, and management teams for breach notifications and regulatory reporting.

Operations & Technology Management

• Oversee day-to-day operations of security technologies (SIEM, firewalls, endpoint security, intrusion detection).
• Monitor security events continuously and respond as needed.
• Maintain and optimize vulnerability management programs (patching and remediation).

Team Leadership & Collaboration

• Build and mentor a collaborative, skilled security team.
• Work with IT and other departments to integrate security into all system development and operational processes.

Regulatory & Industry Compliance

• Ensure compliance with relevant laws, regulations, and industry standards for data protection and cybersecurity.
• Maintain documentation for audits, certifications, and external assessments.
• Coordinate with external auditors and regulators.

Continuous Improvement & Professional Development

• Stay current on emerging security threats, vulnerabilities, and technologies.
• Continuously evaluate and improve security processes, policies, and tools.
• Participate in industry forums, conferences, and professional groups to enhance knowledge and best practices.