Information Technology (IT) Security Manager  

IT SECURITY MANAGER SUMMARY OF FUNCTIONS

The Information Technology Security Manager ensures that the risk to the organization’s information posed by a variety of cyberthreats (cyberattacks; theft or corruption from within; etc.) is minimized. The IT Security Manager ensures that if cyberattacks occur or data are stolen or compromised, these incidents are dealt with promptly and effectively (in coordination with the Data Protection Officer), and the chance of that particular type of incident recurring is minimized.

IT SECURITY MANAGER ESSENTIAL DUTIES AND RESPONSIBILITIES

• Research the latest information technology security trends and risks.
• Help to design, implement, and maintain the organization’s cybersecurity plan.
• Develop and direct implementation of security policies, standards and best practices for the organization, in coordination with Group Member Companies
• Monitor and Track Member Company implementation of IT Security policies, procedures, supporting documentation
• Monitor the organization’s networks for security breaches and investigate violations when they occurs.
• Direct the installation and use of security tools (e.g., firewalls, data encryption), to protect sensitive information.
• Recommend security enhancements to OCIIO. Recommend regular (at least annual) updates to groupwide ISM Policy
• Help computer technicians, end users when they need to install or learn about new security products and/or procedures.
• Ensure that IT security audits are conducted periodically or as needed (e.g., when a security breach occurs).

• A bachelor’s degree in information technology or computer science is required. 10 years of related work experience, with 3 or more in an information security management position, is also required.
• Excellent communication skills and the ability to work well with people at every level and in every department are essential. Candidates with certification in information security (CISSP, CSSLP, CCFP, CISM, etc.) or comparable work experience will be given preference. Risk analysis/assessment experience a plus.
• Experience with Microsoft Windows Server 2008/Unix server required. Microsoft Project experience preferred.
• Worked under or implemented ISO 27001:2013 or ISO 27001:2005
  • Can develop/adopt and enforce Information Security policies, procedures and standards
  • In-depth knowledge of Information Security Risk and industry best practices
  • Knowledge of IT Systems (hardware, software and networks)