IS Security Manager

VHC Health•Alexandria, VA

4d•$136,822 - $259,938

About The Position

The Information Security Manager is responsible for establishing and maintaining a corporate wide information security management program to ensure that all assets are adequately protected. This position is responsible for identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the organization. The ISM position requires a visionary leader with extensive knowledge of information security technologies and sound knowledge of business management. A key element of this role is working with the Sr. Director of IS Optimization and Security, to determine acceptable levels of risk for the organization. The ISM will proactively work with business units to implement practices that meet defined policies and standards for information security. He or she will also oversee a variety of IT-related risk management activities. This role will translate the organizational risk requirements and constraints into technical control requirements and specifications, as well as report on ongoing performance. While the ISM is the leader of the security program, he or she must also be able to coordinate various drivers and constraints to ensure a thorough comprehensive approach across the enterprise.

Requirements

Bachelor's degree in computer science or a related field.
Seven years' experience in Information Security.
Three years' supervisory experience.
Cyber Security certification (CISSP, CISA, or related).

Nice To Haves

Master's degree preferred.

Responsibilities

Establishing and maintaining a corporate wide information security management program.
Ensuring all assets are adequately protected.
Identifying, evaluating and reporting on information security risks.
Meeting compliance and regulatory requirements.
Supporting the risk posture of the organization.
Working with the Sr. Director of IS Optimization and Security to determine acceptable levels of risk.
Proactively working with business units to implement practices that meet defined policies and standards for information security.
Overseeing a variety of IT-related risk management activities.
Translating organizational risk requirements and constraints into technical control requirements and specifications.
Reporting on ongoing performance.
Coordinating various drivers and constraints to ensure a thorough comprehensive approach across the enterprise.