HQ979 - IT Security Manager

Fairbanks Morse Defense • Beloit, WI

65d • Remote

About The Position

Fairbanks Morse Defense is seeking an Information Technology Security Manager who will be responsible for providing leadership and strategic vision in support of enterprise security initiatives. The ideal candidate will ensure that regulatory compliance and data privacy requirements are adhered to, while also forging strong relationships with other internal business partners. They will direct the overall planning and execution of enterprise security strategies and objectives, using operational and tactical expertise to direct and oversee security activities. As a business enabler, the selected candidate will ensure business decisions are implemented with security in mind, while adhering to corporate security policies and requirements. The primary goal for the candidate is to create an adaptable, secure operating business environment. The ideal candidate will need to be an excellent communicator, and capable of interfacing effectively with C-level executives, as well as members of the board of directors, audit committees, and other internal stakeholders. Additionally, the candidate must possess a strong security practitioner background and the ability to effectively collaborate with technical staff. The ideal candidate is a people person who focuses on building a synergistic and collaborative environment where employees are valued, challenged to achieve excellence and enjoy working for the company. As a leader of the information technology program, the candidate should establish highly effective policies, corporate protocols and a culture of collaboration among teams. The candidate must have a strong technical background and fully understand threats, risk mitigation and technical controls to lead a team of security professionals through corporate obligations and defenses. The candidate is accountable for the daily tactical operations and overall strategic execution of the extended team under their leadership.

Requirements

• Bachelor's degree in computer science, information assurance, MIS or related field, or equivalent.
• 5+ years of information security experience, 2+ years of related information security management experience required
• Must be able to obtain and maintain a Secret security clearance
• Extensive experience with cybersecurity requirements such as CMMC, NIST 800.171r2 and r3, NIST 800-53, ISO 27001, and other DoD.
• Experience with GDPR, EU-USA Data Privacy Framework and other data privacy/residency regulations.
• Strong written and oral communication skills across varying levels of the organization.
• Understanding of service design, delivery concepts and control frameworks.
• Solid organizational skills and the ability to multi-task, prioritize workloads and delegate responsibilities.
• Proven ability to receive security team recommendations and act assertively to support objectives.
• Effective stress management in a constantly changing environment.
• Highly focused on building and implementing a strong, cohesive team and security culture.
• Excellent judgment and the ability to make quick decisions when working with complex situations.
• Demonstrated high level of flexibility.
• Forward thinking with strong business acumen.
• Ability to motivate the team to achieve excellence and reward positive behavior.
• High level of integrity, trustworthiness and confidence; represents the company and its management team with the highest level of professionalism.

Nice To Haves

• MBA or master’s degree in information assurance/technology is preferred.
• CISSP or CISM or CCISO and PMP certifications preferred

Responsibilities

• Directs and provides a strategic risk management vision that scales to effectively secure the business without slowing company innovation and execution.
• Drives a strong security culture organization-wide.
• Influences internal and external constituents, and relays best practice recommendations based on evolving threat landscape to protect intellectual property.
• Focuses on building out a security ambassador program to expand the depth and reach of security across the business.
• Defines key performance indicators (KPIs) and metrics that align with business initiatives and delivers them to non-technical individuals in an effective, comprehensible manner.
• Facilitates security governance across the business in conjunction with an information security steering committee and advisory board.
• Is accountable for thorough enterprise policies, security technology architecture, controls, and active monitoring and response objectives.
• Collaborates with other security leaders in the industry to build a strong, trustworthy external network.
• Partners with vendors to build relationships and inspire product enhancements to support business needs.
• Frequently interacts with business units to understand their plans and how information security can securely enable them to execute their vision and business obligations.
• Plays a key role in disaster recovery and business continuity.
• Conducts annual budgetary planning and creates proposals in tandem with the VP of IT.
• Works closely with VP of IT to safeguard virtual and physical assets.
• Motivates employees to maximize rigorous system security controls that are natively available. Also, focuses on implementing the basics and a security maturity model that is tracked and adaptable to necessary changes.
• Reports regularly to senior management and boards, keeping them abreast of the threat landscape and the tactical controls and strategic plans to achieve success.
• Supports automation and orchestration to maximize team talent and reduce routine tasks that can be done through other means.
• Actively recruits and leads by example to create a culture where employees want to work. Leads with humility and is respectful to all.
• Connects with higher education to build a pipeline of interns and potential future employees.
• Coaches direct and extended security team and places a heavy emphasis on employee retention – a people-first leader.
• Facilitates third-party audit reviews of internal departments and reports results to management and security oversight committees.
• Requires periodic awareness training for company employees on information security topics and allocates security budget to train technical staff members.
• Recognizes the varying strengths, skills and needs of the team and adapts his/her leadership skills to obtain the best possible results from direct reports.
• Openly supports the organization, the management team and executive leadership team, even during times of adversity.
• Utilizes open communication and managerial courage to ensure the standards, expectations and goals of the organization are respected and upheld.

Benefits

• Fairbanks Morse Defense offers a competitive benefits package including but not limited to, medical, dental, vision, life, and disability insurances, and 401k retirement plan with employer match. In addition, we offer paid time off, paid holidays, paid parental leave, and tuition reimbursement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level