Information Security Manager (Job ID: 1533)

Colonna's Shipyard•Norfolk, VA

30d•Onsite

About The Position

The Information Security Manager leads and maintains the company's cybersecurity, information assurance, compliance, and Microsoft 365 technology programs. This role protects company systems, customer information, and Controlled Unclassified Information (CUI); supports compliance with contractual and regulatory cybersecurity requirements; and serves as a senior escalation point for complex technical issues across the commercial technology environment. The position is located onsite in Norfolk, VA and will often require hours beyond a standard work week with flexible schedule availability to support production/operations. Position may require limited travel.

Requirements

Bachelor's degree in cybersecurity, information technology, information systems, computer science, or a related field; equivalent education and experience may be considered.
Five (5) years of experience in information security, cybersecurity, compliance, systems administration, cloud administration, or a related technology role.
Working knowledge of security frameworks and requirements such as NIST SP 800-171, CMMC, CIS Controls, or comparable standards.
Hands-on experience administering Microsoft 365 and cloud-based security technologies.
Strong leadership, communication, analytical, project-management, and advanced troubleshooting skills.
Ability to translate security and technical risks into clear business recommendations.
Must be able to handle difficult situations requiring a well-developed sense of strategy, timing, persuasion, and management ability.

Nice To Haves

CISSP, CISM, Security+, CRISC, Microsoft Security, or related certifications.
Experience supporting Department of Defense contractors, CUI environments, or other regulated organizations.
Experience coordinating CMMC assessments and cybersecurity compliance programs.
Experience with Microsoft Defender, Microsoft Sentinel, Intune, Entra ID, Microsoft Purview, and enterprise security monitoring solutions.

Responsibilities

Lead the organization's information security and cybersecurity programs.
Develop, implement, and maintain cybersecurity policies, standards, procedures, and security controls.
Manage compliance initiatives related to CMMC, NIST SP 800-171, DFARS, FAR, and customer cybersecurity requirements.
Conduct risk assessments and oversee remediation efforts, Plans of Action and Milestones (POA&Ms), and continuous improvement activities.
Coordinate internal and external cybersecurity audits, assessments, and evidence collection.
Oversee incident response planning, exercises, investigations, containment, recovery, and reporting.
Monitor threats, vulnerabilities, and emerging risks and recommend appropriate mitigation strategies.
Manage security awareness and role-based training programs.
Collaborate with business leaders and IT teams to implement practical security controls that support operations while reducing risk.
Manage and support the company's Microsoft 365 technology environment, including Microsoft Entra ID, Exchange Online, SharePoint Online, Microsoft Teams, Intune, Microsoft Defender, and related cloud services.
Maintain Microsoft 365 security, identity, access, endpoint-management, governance, and compliance configurations.
Oversee privileged access, conditional access, multifactor authentication, information protection, retention, and data loss prevention capabilities.
Evaluate and implement Microsoft 365 features and integrations that improve security, reliability, governance, and operational efficiency.
Coordinate licensing, service changes, platform standards, and administrative practices with IT leadership and business stakeholders.
Act as a senior escalation point for complex technical issues across the commercial environment, including infrastructure, cloud platforms, identity, endpoints, collaboration services, enterprise applications, and cybersecurity incidents.
Lead or coordinate troubleshooting and resolution of high-impact technology issues affecting business operations.
Partner with infrastructure, applications, support, and business teams to deliver secure, reliable, and supportable technology services.
Provide technical guidance for system architecture, integrations, identity management, access control, and technology modernization initiatives.
Support business continuity, disaster recovery, and operational resilience planning and testing.
Mentor IT personnel on cybersecurity practices, Microsoft 365 administration, operational procedures, and advanced troubleshooting.
Develop cybersecurity roadmaps, budgets, metrics, and strategic initiatives aligned with business objectives.
Communicate cybersecurity risks, compliance status, technical concerns, and recommended investments to leadership.
Support vendor risk management, third-party security reviews, and cybersecurity requirements within contracts and procurement activities.
Evaluate emerging technologies and industry trends and recommend solutions that improve security and business operations.