Information Security Manager

Job Title: Security Operations Manager

Job Summary:

The Security Operations Manager will oversee the development, implementation, and enforcement of IT security policies and ensure adherence to regulatory and industry compliance standards. This role will work closely with various departments to align security practices with business objectives and regulatory requirements, ensuring the organization maintains a robust security posture.

Key Responsibilities:

• Oversee the detection, investigation, and resolution of security incidents and breaches. Develop and manage incident response plans and conduct post-incident analysis.
• Manage day-to-day security operations, including monitoring security systems, managing security alerts, and ensuring the implementation of security controls.
• Develop and implement security strategies, policies, and procedures to mitigate risks and improve the organization’s security posture.
• Conduct risk assessments and vulnerability analyses to identify potential threats and weaknesses. Recommend and implement measures to address identified risks.
• Ensure compliance with relevant regulatory requirements and industry standards. Prepare and present security reports for internal and external audits.
• Work closely with IT, development, and other departments to integrate security practices into various projects and operations.
• Develop, implement, and maintain comprehensive IT security policies, procedures, and standards that align with industry best practices and regulatory requirements.
• Ensure compliance with relevant laws, regulations, and standards (e.g., GDPR, HIPAA, PCI-DSS). Monitor and report on compliance status and manage audits and assessments.
• Conduct regular risk assessments and gap analyses to identify potential security and compliance risks. Develop and implement strategies to mitigate identified risks.
• Maintain accurate and up-to-date documentation of security policies, procedures, and compliance activities. Prepare reports and presentations for senior management and stakeholders.
• Develop and deliver security awareness and training programs to educate employees on security policies, procedures, and best practices.
• Collaborate with the security operations team to ensure effective response to security incidents, including managing post-incident reviews and ensuring compliance with reporting requirements.
• Oversee third-party vendor compliance and security assessments, ensuring that vendors meet security and compliance requirements.
• Stay current with changes in regulations and industry standards, and update policies and procedures accordingly to maintain compliance.

Qualifications:

• Bachelor’s degree in information security, Computer Science, Business Administration, or a related field (or equivalent experience). Advanced degrees or relevant certifications are a plus.
• 5+ years of experience in IT security, compliance, or a related field, with at least 2 years in a managerial role.
• Relevant certifications such as CISSP, CISM, CISA, or CIPP are highly desirable.
• - In-depth understanding of IT security frameworks, compliance standards, and regulatory requirements.
• Experience with security policies, risk management, and audit processes.
• Excellent written and verbal communication skills, with the ability to present complex information clearly to various stakeholders.
• Proficiency in security and compliance management tools and software.