Information Security Manager - IAM

Federal Home Loan Bank of Des Moines•Des Moines, IA

4d•$128,211 - $152,251•Hybrid

About The Position

At FHLB Des Moines, we work each day to develop an inclusive culture that supports and leverages the complexity of a diverse workforce. This enables us to effectively serve the needs of our members and help them succeed. Plans, organizes, and manages an information security team. Partners with IT and builds and maintains information security systems to ensure that data systems, databases and networks are protected from unauthorized users. Provide strategic direction and operational oversight for identity lifecycle management, authentication services, single sign-on, enterprise MFA, and credential and privileged access management. Organize the security investigation and implementation of corrective actions. Provides Bank with appropriate education and training to support Information Security best practices. Performs risk assessments to understand and prioritize risk and proposed actions. Delivers enhancements and projects to improve the security defenses of the Bank. Stays informed about new regulations and standards that bring new requirements or best practices to the Bank. Provides security oversight to the Bank, utilizing tools to find gaps in meeting policies. Understand and ensure the department is meeting our security controls obligations.

Requirements

Bachelor’s degree in information security, computer science or equivalent work experience.
Extensive knowledge of data security, access management and information systems.
Specific knowledge of data security standards, procedures and products.
Knowledge of risk management and effective control procedures, project management.
Understanding of SSO, MFA, identity lifecycle management, and privilege access management
Experience with protocols such as SAML and OAuth, and managing entitlements/provisioning on a platform such as Sailpoint IIQ
Strong understanding of Active Directory and cloud identity platforms
Excellent written and verbal communication skills.
5-10 years’ experience managing projects, work experience in developing and reviewing policies, methodologies, and procedures for security.

Responsibilities

Manage and deliver technical project and enhancements.
Propose and partner with Bank to deliver on security improvements, close gaps, or address controls issue.
Partner with Internal Audit, SOX & Enterprise risk, to ensure we are interlocked in improving information security and addressing issues.
Ensure we have a security response plan, and partner with the business to ensure readiness for a cyber event.
Ensure appropriate controls are maintained for joiner, mover, and leaver processes.
Identify opportunities for automation within team processes
Understand gaps in information security program (NIST Gap assessment) and propose actions to close gaps.
Ensure on-going education of teams, as required by many regulations and best practices.
Provide updates to regulators on any information requests.
Ensure high qualified staff to address the responsibility of the team.
Work with employees to keep up with emerging threats and practices to improve security posture.
Manage and develop high performing team members through communication, feedback, coaching and completion of mid-year and year end performance evaluations.
Identify strengths and weaknesses in team members and provide training to improve skills and knowledge.
Manage departmental regulatory issues and internal controls.
Serve as an escalation point of contact for cybersecurity, IT and business unit guidance.
Develop and implement comprehensive cybersecurity strategies, policies, and procedures to protect the organization's information assets from cyber threats.
Collaborate with senior management to assess security risks, prioritize initiatives, and allocate resources effectively.
Stay abreast of emerging threats, industry best practices, and regulatory requirements to ensure the organization's security posture remains current and effective.
Oversee the design, implementation, and maintenance of the organization's network infrastructure, including routers, switches, firewalls, and VPNs.
Monitor network performance, troubleshoot issues, and implement solutions to optimize reliability, scalability, and security.
Collaborate with cross-functional teams to plan and execute network upgrades, expansions, and migrations while minimizing disruptions to business operations.
Develop and maintain incident response plans and procedures to effectively detect, contain, and mitigate cybersecurity incidents.
Lead investigations into security breaches, coordinate with relevant stakeholders, and implement corrective actions to prevent future incidents.