Information Security Manager

DAV (Disabled American Veterans)•Erlanger, KY

4h•$74,360 - $115,627

About The Position

The Information Security Manager organizes DAV information security activities and risk assessments, and manages internal efforts to ensure compliance with laws, regulations, internal policies, and standards. The role develops security policies and strategy, supports organization-wide compliance, coordinates security efforts across internal IT groups, manages audit findings, and provides strategic risk guidance for IT projects. The position reports to the IT Security & Operations Associate Director and requires up to 10% travel.

Requirements

Broad knowledge of information technology governance practices, including risk, audit, policy and standards development, metrics development, and education and training.
Strong knowledge of and experience working with industry-wide information security frameworks, including ISO 27001 and NIST.
Strong organizational skills.
Strong project management skills.
Ability to work as a self-starter with minimal supervision or direction.
Ability to motivate and lead technical teams.
Excellent written and verbal communication skills.
Exposure to MS Word, MS Project, SharePoint, and associated processes and tools.
Bachelor's degree or 5+ years of experience in the field or in a related area.

Nice To Haves

A valid motor vehicle driver's license other than a motorcycle license.

Responsibilities

Develop and recommend security policies, standards, procedures, and controls for maintaining data security.
Conduct reviews to measure compliance with NIST, PCI, and ISO standards, regulations, and frameworks.
Monitor compliance with state, federal, and international laws regarding data privacy and security breaches.
Develop a security strategy, security awareness program, security architecture, and security incident response.
Develop and maintain up-to-date security policies, standards, and guidelines.
Oversee training and dissemination of security policies and practices.
Coordinate information security efforts across internal IT groups to ensure organization-wide consistency and minimize duplicated effort.
Manage audit gaps, identify those within IT, remediate or close audit findings, negotiate closure dates, and track and report progress.
Assist management in conceptualizing compliance-related risks and how to address them using an integrated risk management approach.
Provide strategic risk guidance for IT projects, including evaluation and recommendation of technical controls.
Perform other duties as assigned.
Travel up to 10%.