CONSUMER DIRECT CARE NETWORK

JOB SUMMARY

The IT Security Manager is responsible for developing security strategies for IT systems, network and infrastructure including cloud environments. Additional responsibilities include identifying potential security risks, vulnerabilities and weaknesses and implementing measures to mitigate and strengthen environments; designing and leading security initiatives ensuring sustained quality via metrics and measurables, ensuring compliance with all applicable legal requirements, regulations, policies, and procedures and promoting awareness of security issues and initiatives among management and company employees to ensure proper security principles are reflected in the organization’s operations and goals.

JOB RESPONSIBILITIES

• Collaborate with stakeholders regarding delivery of services

• Comfortable with public speaking

• Communicate effectively and be a focal point for the organization regarding security communications

• Lead initiatives focused on maintaining and improving cybersecurity

• Develop and implement security policies, protocols, and procedures 

• Develop and implement incident response plans and procedures and ensure proper and effective response and recovery from security incidents

• Act as an escalation point and provide coordination and support for IT teams during security incidents

• Contribute and encourage documentation into knowledge bases to better support end users and the IT support teams

• Design and oversee disaster recovery and business continuity plans, documentation, and testing 

• Prepare and communicate security reports and metrics to leadership and stakeholders

• Develop and oversee logging, auditing, and monitoring processes to improve overall security 

• Participate in establishing information security strategic vision, strategy, goals and metrics

• Demonstrate effective problem solving and decision-making skills

• Analyze data and trends to form proposals for security improvements

• Evaluate security tools and technologies to address security needs, ensuring proper implementation and maintenance

• Participate in security audits and assessments

• Participate in developing information security awareness training to organization personnel

• Oversee continual improvements in all areas of security technology and processes

• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement including in the following areas: 

o Database, internet, desktop, Cloud, network, infrastructure environments

• Provide technical security mentoring and coaching of IT team members 

• Demonstrate dependability

• Maintain necessary skills and knowledge with regards to cybersecurity technologies and trends

• Participate in, and assign, professional development and training activities

• Prioritize and multitask effectively

• Other duties as assigned

JOB QUALIFICATIONS

• Bachelor’s Degree in Information Technology or equivalent experience preferred

• Minimum 8 years experience in IT Cybersecurity preferred

• Minimum 3 years IT Cybersecurity management preferred

• GSEC, Security +, or CCSP certification or equivalent experience preferred

• Be able to successfully pass a background screening

• Employees must provide their own reliable internet if working a remote/hybrid position.

The incumbent typically works in an office environment and uses a computer, telephone and other office equipment as needed to perform duties. The noise level in the work environment is typical of that of an office. Incumbent may encounter frequent interruptions throughout the workday. The employee is regularly required to sit, talk, or hear; frequently required to use repetitive hand motion, handle or feel, and to stand, walk, reach, bend or lift up to 20 pounds. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.