It Security Manager

Job Summary:

As a Mid-Level Security Analyst (Manager Level), you will lead and manage day-to-day security operations and ensure the implementation and enforcement of security measures across the organization. Your role will involve assessing vulnerabilities, managing security incidents, and overseeing a team of security professionals. You will collaborate closely with IT, risk management, and other business units to maintain a secure infrastructure and ensure compliance with relevant security standards and regulations.

Key Responsibilities:

Security Operations Management:

• Oversee daily security operations and lead the Security Operations Center (SOC) team.
• Develop and enforce security policies, procedures, and guidelines.
• Manage vulnerability scanning, penetration testing, and threat monitoring activities.
• Ensure all security tools (firewalls, IDS/IPS, DLP, SIEM) are properly configured, maintained, and updated.

Incident Response and Management:

• Lead investigations and response to security incidents, breaches, or cyberattacks.
• Perform root cause analysis and post-incident reporting.
• Ensure incident response plans are regularly tested and optimized.

Threat and Vulnerability Management:

• Manage and review system vulnerabilities and threats, and implement risk mitigation strategies.
• Perform regular risk assessments and security audits to identify and address security gaps.
• Collaborate with DevOps and infrastructure teams to integrate security best practices in all systems.

Compliance and Governance:

• Ensure compliance with security regulations, standards, and frameworks (ISO 27001, NIST, GDPR, etc.).
• Maintain up-to-date documentation of security controls and processes.
• Coordinate internal and external security audits, including audits related to compliance.

Leadership and Team Development:

• Supervise and mentor junior security analysts and engineers.
• Provide guidance on career development, training, and certifications.
• Collaborate with HR and senior leadership to define security team goals and objectives.

Vendor and Stakeholder Management:

• Liaise with third-party vendors to assess security tools and technologies.
• Work closely with other business units, such as IT, legal, and finance, to ensure security objectives are aligned with business priorities.

Security Awareness and Training:

• Develop and implement security awareness training programs for employees.
• Foster a culture of security awareness across the organization.

Required Skills and Qualifications:

• Education: Bachelor's degree in information security, Computer Science, or a related field.

Experience:

• 4-7 years of experience in cybersecurity or information security roles.
• Prior experience in a leadership or managerial role within security operations is preferred.

Certifications (desired but not mandatory): CISSP, CISM, CEH, GSEC, or other relevant security certifications.

Technical Proficiency:

• Strong knowledge of SIEM, firewalls, IDS/IPS, vulnerability management, and encryption.
• Experience with security frameworks such as NIST, ISO 27001, or CIS.
• Hands-on experience with incident response and management.

Soft Skills:

• Excellent communication and presentation skills.
• Strong leadership, problem-solving, and decision-making abilities.
• Ability to work under pressure and prioritize tasks in a fast-paced environment.

Key Performance Indicators (KPIs):

• Reduction in security incidents and breaches.
• Compliance with industry regulations and standards.
• Team development and performance improvements.
• Successful mitigation of identified vulnerabilities and risks.