Corporate Information Technology Manager

Morrison Products•Cleveland, OH

About The Position

We are looking for an experienced Security and Compliance Manager who will ensure that our data privacy policies, operations, and systems comply with all relevant state and federal laws and best cybersecurity practices. Reports to the Director of IT.

Requirements

5 years of experience in a Compliance, Risk Management, or Cybersecurity role.
Strong understanding of information security and privacy standards and best practices related to data confidentiality.
In-depth knowledge of industry-relevant data security and compliance regulations.
Excellent analytical, data visualization, and communication skills.
Experience in IT auditing practices.

Nice To Haves

2 years of experience as a Compliance Manager or another related supervisory role.
A CISSP certification will be considered a plus (Certified Information Systems Security Professional)

Responsibilities

Review and update our current information security and privacy policies.
Create and oversee the implementation of new security and compliance policies and procedures.
Carry out regularly scheduled security functions, such as network scans, vulnerability scans, and security-log reviews. (Pen Testing, etc.)
Conduct assessments and audits to measure the efficiency of our compliance and security systems.
Evaluate and document disaster recovery programs to ensure better response in cases of security incidents and breaches.
Advise the Director of IT and other executives on the best strategies for optimizing the security of data systems, information assets, and general business processes.
Keep up to date with external security and compliance regulations and data privacy and security best practices to lead the improvement of internal security and compliance policies and procedures as required.
Conduct regular training sessions and workshops to educate employees about the latest information security and compliance policy updates.
Collaborate with vendors to ensure proper data handling security measures and adherence to all licensing requirements.
Report security breaches to management for prompt resolution.