Information Security Program Manager (Hybrid)

Barr•Minneapolis, MN

1d•$125,000 - $150,000•Hybrid

About The Position

Barr is seeking an experienced information security program manager to join our Minneapolis, Minnesota, team. In this hybrid role, you will lead Barr’s information security program and work cross-functionally across teams, focusing on continuous improvement as the security threat environment evolves. This is a hands-on role and reports to the director of information systems. A successful person in this role is an analytical problem-solver with exceptional attention to detail and a passion for continuous learning. They are highly organized and leverage their technical expertise to implement robust security measures that safeguard system integrity and reliability. They also dig deep when needed, maintaining a broad strategic perspective on the business. The ideal candidate has a high degree of self-initiative, proactively leading security improvement and governance efforts, and enjoys collaborating with technical and non-technical colleagues, always with a client-service mindset.

Requirements

Bachelor’s degree in computer science, information technology, or a related field or equivalent practical experience.
10+ years of related IT infrastructure or information security experience.
Working knowledge of corporate network environments and technologies such as VMware virtualization, Microsoft Windows Server, Active Directory, and Group Policy management.
Experience with cloud platforms such as Microsoft Azure, Microsoft 365, or Amazon Web Services (AWS) administration and support.
Experience working with SIEM/SOC tools, including follow-up investigations and response.
Familiarity with scripting and automation tools (e.g., PowerShell, Python, Ansible) for system administration or security automation.
Willingness and ability to perform off-hours administrative changes and respond to emergencies or urgent issues outside of regular hours if needed.
Must be legally authorized to work in the United States without the need for sponsorship by Barr, now or in the future.

Nice To Haves

Recognized security certifications demonstrating expertise and commitment to the field.
Experience supporting external audits and compliance assessments (such as SOC2 audits, ISO 27001 certification processes, NIST 800-series compliance, or CMMC).

Responsibilities

Oversee and continuously improve Barr’s information security program.
Ensure that security measures are integrated across systems and that protective controls support the company’s needs for performance, stability, and high availability.
Provide insight into developing and executing the company’s security strategy.
Stay current on emerging threat intelligence and cybersecurity trends, and advise the organization on mitigating new threats.
Develop and maintain information security policies, standards, and procedures to ensure alignment with industry best practices and frameworks such as the NIST Cybersecurity Framework, ISO 27001, and NIST SP 800-171.
Plan, prepare for, and respond to security incidents or breaches, helping to coordinate containment, investigation, and recovery efforts to minimize damage and downtime.
Support the company’s Crisis Response Team in planning and response activities that relate to or rely on technology.
Continuously monitor the IT environment for signs of security issues or vulnerabilities using appropriate tools and resources.
Serve as the first escalation point for potential security incidents.
Lead proactive vulnerability management by conducting regular security scans and ensuring that processes and automated systems for the timely application of patches and/or upgrades are effective.
Develop and maintain internal security documentation and provide technical training and guidance for IT staff and end users on security best practices.
Maintain required documentation, perform internal security testing, and coordinate responses to audit findings or external audit requests.
Respond to external security questionnaires, assessment tools, and client security surveys.
Track key security program metrics and use these insights to drive ongoing program improvements.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Accidental death insurance
Flexible spending accounts for medical and dependent care
401(k) retirement savings plan with company contribution
Employee Stock Ownership Plan (ESOP) with company contribution in Barr stock
Profit distribution through annual bonus distribution plan, ESOP, and dividends to shareholders
Annual time and expense allowances for professional development
Mentorship program
Internal training opportunities
Paid time off
Paid holidays
Compensatory time for exempt/salaried staff (time off or pay for extra time worked)
Paid family leave
Ergonomic analysis and equipment
Personal Protective Equipment allowance
Wellbeing-focused educational opportunities