Manager Security Comlpaces

Security Compliance Manager

Duties include:

• Lead the implementation of a security initiatives and systems via well-defined plans including procedures, deadlines, and accountability.
• Works with the members of the IT team on the architecture of IT applications and infrastructure assuring that security is maximized.
• Develop, implement and maintain a Physical Security Program and Cyber Security Policies
• Translate Information Security knowledge into actionable plans to protect enterprise assets
• Provides the support, administration, and maintenance necessary to ensure effective and efficient information security
• Responds to security incidents in a timely manner
• Develop, maintain and exercise a security incident response plan
• Performs administration of firewalls, intrusion detection and prevention systems, and SIEM solutions such as Splunk or LogRythm.
• Develop and educate the IT organization in information security standards and best practices for common web applications and infrastructure.
• Manage vulnerability responses by performing analysis, determining enterprise scope, impact and remediation of identified ad hoc vulnerabilities.
• Stay up to date with various security vendors to support threat and vulnerability management across web, mobile and other infrastructure systems.
• Responsible for developing, managing and periodic reporting of the security metrics to accurately track the current state of defenses, protections and performance
• Provide recommendation and implement innovative solutions, modifications and enhancements to security training and awareness programs.
• Develops and manages an information security operations center (ISOC), monitoring, assessing and defending the enterprise information systems, including websites, applications, databases, data centers, servers, networks, desktops and other endpoints.
• Manages daily technical operations of the information security team.
• Designs and oversees the execution of internal security testing methodologies and execution; conducts vulnerability testing and remediation on software, architecture and vendors.
• Interact with senior management levels, which involves negotiating or influencing on significant matters
• Ensure that effective tools and processes are in place to protect assets from the evolving threat landscape
• Work with Infrastructure and Desktop support personnel to configure and deploy tools
• Build procedures to administer the tools and monitor outputs
• Stay abreast of new threats and continuously evaluate current processes and tool sets
• Commit to continuous learning and networking with the larger cyber security community
• Design processes and procedures to enable information technology personnel to conform with the compliance framework
• Work with leaders outside of IT to design processes and procedures for operational business units’ compliance.
• Be accountable for periodic testing and auditing of compliance

• At least 5 years of demonstrated experience in some of the enterprise security functions such as, Security Compliance framework, Identity & Access Management, Cloud Security, Vulnerability Management, Firewalls, Antivirus, Penetration testing and other related functions
• Strong knowledge of information systems security components and best practices including: firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices
• Knowledge of industry standard best practices with regards to security
• Working knowledge of Microsoft Active Directory, Microsoft Windows Operating Systems and Microsoft Exchange, Microsoft Azure, Office 365