Information Technology Security Manager

MARLIN LEASING CORPORATION•Mount Laurel Township, NJ

6d•$140,000 - $160,000•Hybrid

About The Position

The Information Technology Security Manager leads PEAC Solutions’ cybersecurity program, combining strategic oversight with hands-on technical expertise to configure and maintain security controls. The role develops security strategy, governance, policies, standards, and procedures and oversees security operations, risk management, incident response, compliance, and security awareness initiatives. The manager partners with business leaders, auditors, and third-party providers to align security priorities with business objectives. The position is based in PEAC Solutions’ Mt. Laurel, New Jersey office and follows a hybrid schedule: three days in the office and two days remote.

Requirements

Advanced knowledge of NIST, CIS Controls, ISO 27001, and zero-trust principles.
Hands-on experience securing Microsoft 365, Azure, hybrid infrastructure, and enterprise networks.
Working knowledge of Microsoft Defender ATP, Fortinet security technologies, and Cisco networking and security platforms.
Technical proficiency with firewalls, EDR/XDR, SIEM, multifactor authentication, email security, vulnerability management, encryption, and data loss prevention tools.
Expertise in identity and access management, privileged access controls, Active Directory, and Microsoft Entra ID.
Experience in incident response, forensic coordination, threat remediation, business recovery, and post-incident improvement.
Ability to assess security risks, support audits, evaluate compliance, and develop policies and standards.
Strong leadership and communication skills, including the ability to translate technical risks into business impacts and practical recommendations.
Effective planning and prioritization skills to manage multiple initiatives, vendors, and competing demands.
At least eight years of progressively responsible experience in cybersecurity, information security, or infrastructure security.
Hands-on experience in cloud security, security operations, vulnerability management, incident response, and regulatory compliance or audit support.
Demonstrated ability to develop and strengthen cybersecurity programs that reduce risk and support long-term business resilience.

Nice To Haves

Experience with Cloudflare security, performance, and application protection services.
Familiarity with Cisco Umbrella or Cisco Secure Access, including secure web gateway, DNS-layer security, and secure access service edge capabilities.
Knowledge of Microsoft Exchange and Exchange Online security, including threat protection, filtering, authentication, and mail-flow controls.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent professional experience is considered.
Relevant certifications such as CISSP, CISM, CCSP, Microsoft Certified: Azure Security Engineer Associate, or equivalent.

Responsibilities

Develop and maintain the cybersecurity strategy, roadmap, policies, standards, and operating procedures.
Oversee protection across network, endpoint, cloud, identity, email, application, and data environments; monitor emerging threats and implement preventive and detective controls.
Lead incident triage, containment, remediation, recovery, root-cause analysis, and corrective actions.
Direct risk assessments, vulnerability reviews, penetration testing, control evaluations, and remediation tracking across internal systems, cloud services, and third parties.
Coordinate security audits, compliance initiatives, and evidence collection to meet regulatory, contractual, and internal requirements.
Guide security design for systems, projects, integrations, and technology changes; govern authentication, privileged access, role-based permissions, and access reviews.
Deliver security training and awareness programs to strengthen accountability and the organization’s security culture.
Manage security vendors, auditors, and service providers to ensure effective performance and appropriate risk management.
Develop cybersecurity and departmental KPIs covering risk exposure, control effectiveness, operational performance, incident trends, remediation, and program maturity.
Present cybersecurity results to executive leadership with recommendations on priorities, improvements, and resource needs.