IT Security Manager

Amida Technology Solutions•Washington, DC

4d•Hybrid

About The Position

Amida Technology Solutions is a DC-based technology company focused on data interoperability, integrity, governance, and security. We create solutions that collect, reconcile, transform, and standardize data for business intelligence, advanced analytics, decision support, and user transactions. We specialize in taking data from inception to impact. Our team is composed of creative, forward-looking thinkers who are passionate about using cutting-edge technology to improve lives and generate a positive impact on our country. We offer an entrepreneurial, high-growth environment that values fresh ideas, candid conversations, and authentic teamwork. Amida Technology Solutions is seeking an IT Security Manager. The selected candidate will lead our organization's cybersecurity strategy and operations, overseeing the protection of company systems and data, ensuring compliance with regulatory requirements, and continuously improving our security posture. This role will report to the CFO. The ideal candidate will be motivated by the opportunity to support public agencies, nonprofit organizations, and private companies in transforming their data into actionable insights. The candidate must be able to work 3 days per week in our offices in DC or Richmond, VA.

Requirements

Bachelor's degree in computer science, information security, or a related field
At least 10 years of experience in IT security
At least 3 years in a managerial or leadership role
Experience managing incident response and leading forensic investigations
Strong knowledge of security architecture, network and endpoint security, cloud security (e.g., AWS, Azure, or GCP), and identity and access management
Familiarity with governance, risk, and compliance (GRC) practices
Technical writing of deliverables for executive and technical team audiences
Excellent communication, leadership, and interpersonal skills
Vendor, applications, and supply chain cyber risk assessment experience

Nice To Haves

Industry certifications such as CISSP, CISM, CISA, or equivalent are strongly preferred
Experience in regulated industries (finance, healthcare, national security components etc.)
Familiarity with DevSecOps practices and secure software development life cycle (SDLC)
Knowledge of Zero Trust architecture principles
Master's degree in computer science, information security, or a related field

Responsibilities

Oversee and enhance Amida's IT and physical office cybersecurity and hygiene practices, ensuring the protection and efficiency of cloud environments and user systems across three global office locations
Manage security protocols and maintain optimal performance for operations across multiple continents
Lead the development and implementation of enterprise-wide IT security policies, procedures, and standards across Google Workspace, AWS, Azure, and government AWS and Azure
Manage and mentor IT professionals
Maintain a physical security program aligned with Amida's regulatory requirements
Oversee incident response planning and execution, including investigation, containment, eradication, and post-mortem analysis of cloud, information system, and email compromise activity
Conduct regular risk assessments and ensure appropriate mitigation plans are in place
Uphold and enforce the high-quality standards provided by Tier I and II support staff with internal and external users, including managing helpdesk staff and serving as point of escalation as required
Ensure team follows processes such as IT onboarding and offboarding, working collaboratively with other departments to improve processes
Ensure compliance with relevant laws, regulations, and frameworks (e.g., ISO 27001, CMMC Levels I and II, HITRUST e1 and r2, NIST, GDPR, HIPAA, SOC 2)
Collaborate with IT, business stakeholders, and third parties, including clients, to integrate security best practices into infrastructure and application design
Manage third-party security tools and services (e.g., SIEM, endpoint protection, firewalls)
Lead security awareness training and education and phishing exercises across the organization
Prepare and present security metrics and reports to executive leadership
Oversee vulnerability, patch management, and organizational backup programs
Evaluate emerging security technologies and recommend investments aligned with business goals
Perform security assessments of vendors, applications, and processes as they integrate with Amida's operational environment
Maintain and manage a 'low-risk' cyber score for cyber insurance suitability
Other duties as assigned