Information Security Manager

Smc Corp Of America • Noblesville, IN

302d

About The Position

The Manager, GISO (Global Information Security Operations) is responsible for SMC Group Companies' security programs which may include: Endpoint Security, Identity & Access Management, Network & Application Security, Threat & Vulnerability Management, Security Strategy, Automation and Engineering, Cybersecurity Awareness, and Security Event Management & Response. This position is accountable for the ongoing management, risk-based design, implementation, and maturity of the security program across the enterprise required to protect the organization from adversaries (Threat Actors and Hackers). This role actively engages third party vendors, partners and stakeholders to design, manage, and mitigate cyber security risks and threats. The role is responsible for responding to data breaches and security events, engaging SMC stakeholders, and providing executive level updates and briefs.

Requirements

• Bachelor's degree in Information Technology or relevant work experience.
• 5+ years of experience in information technology, information security, and operational support.
• 5+ years of IT leadership experience.
• Maintain a high level of integrity, composure, and confidentiality.
• Excellent interpersonal communication skills.

Nice To Haves

• Knowledge of the latest versions of the various cybersecurity frameworks - NIST CSF, GDPR, CIS, and others (highly recommended).
• Experience in risk assessment, control design, and reporting.
• 10+ years of experience in information technology, information security, and/or operational support.
• Experience in executive presentation and strategy development.

Responsibilities

• Assist in the design of the cybersecurity and risk management multi-year strategy.
• Establish security risk management framework, assessments, and controls using industry recognized frameworks.
• Communicate strategy to all stakeholders.
• Assist in the management of the global security incident response activities in a 24x7x365 environment.
• Oversee and approve written artifacts, security advisories, and communications produced by the team.
• Supervise the development and operation of internal controls to assess risks, and work to improve any deficiencies.
• Establish standard operating practices based on the assigned frameworks to drive security-first mindset across application development, infrastructure, and business operations.
• Establish program controls, processes, and support strategy in partnership with the office of the CIO (Global IT Administration).
• Assist in the development of yearly departmental budget and spending schedule based on financial policy; manage to budget.
• Assist finance team in developing cost sharing allocation for global security toolsets.
• Review and approve financial requests and invoices as required.
• Evaluate, implement, and maintain appropriate cybersecurity and risk management toolsets to support the organization's global risk posture.
• Prepare, submit, and manage requests for spending approval to executive leadership in the US and Japan.
• Perform vendor management administrative duties for new and existing partners.
• Implement and maintain annual security awareness training program.
• All other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Industry: Machinery Manufacturing
• Education Level: Bachelor's degree