Manager, Enterprise Security

ONE Gas•Tulsa, OK

10h

About The Position

Oversee information security analysts in enterprise security strategy, security system processes, programs, communications, and activities throughout the security infrastructure and systems enterprise. Provide input to determine appropriate information risk levels for the enterprise and collaborate with affected business units and key stakeholders to minimize exposure in accordance with applicable laws and regulations. The role leads and guides enterprise security employees, defines tactical security activities and processes, provides long-term strategies as defined by leadership, and oversees security configuration and engineering for new technologies in critical business functions. It also leads integration of security solutions to align with enterprise security initiatives and compliance requirements, mentors staff during incident resolution and remediation analysis, and contributes to security policies, standards, procedures, guidelines, monitoring, and improvement activities. The position collaborates across ONE Gas to identify appropriate risk levels for information assets and works with leadership on enterprise security project planning and budgeting. Regular and reliable attendance is required, and additional duties may be assigned. The job description is a guideline rather than an exhaustive description and may change to meet business needs.

Requirements

A bachelor's degree in MIS, computer science, mathematics, or a related field is preferred, or an equivalent combination of education and additional work experience.
Minimum of seven years of relevant experience; the role typically calls for eight to ten years.
Typically, two years of experience in a leadership role.
Expert-level knowledge within advanced security domains and extensive knowledge of related domains.
Experience with current data networking, server, workstation, and/or mobile technologies, including desktop/laptop hardware, operating systems and endpoint applications; network and edge protection systems; Windows server and/or Unix operating systems; shared storage; virtualization; mobile platforms; event monitoring, logging and alert correlation; and cloud services.
Previous experience related to operating systems software, computer hardware, networking, communications, security administration, project management, application architecture, system/software development lifecycle, and cloud computing.
Demonstrated ability to communicate complex information security concepts to stakeholders.
Experience investigating, assessing, identifying, researching, and remediating security issues, and performing risk and vulnerability assessments.
Previous experience researching, preparing, and composing SOC procedures and documentation, reports, and correspondence.
Working knowledge of IT infrastructure environments, local and wide-area networks, and application security needs.
Experience interacting, advising, guiding, training, and communicating effectively.
Experience managing, training, and/or supervising, and knowledge of personnel policies and procedures.
Demonstrated ability to read and write fluently in English.
Minimum applicable driver's license.
Ability to use required office tools and equipment.
Ability to communicate and/or exchange information or instructions and conduct oral presentations and/or meetings.
Visual abilities sufficient to perform job duties.

Nice To Haves

Bachelor's degree in MIS, computer science, mathematics, or a related field.
Certified Information Systems Security Professional (CISSP).
Certified Secure Software Lifecycle Professional (CSSLP).
Certified Information Security Manager (CISM).
Certified Information Privacy Professional (CIPP).
Certified Information Systems Auditor (CISA).

Responsibilities

Lead, manage, and/or guide employees performing enterprise security-related activities.
Define tactical activities and processes to address enterprise security issues and provide long-term strategies as defined by leadership.
Oversee configuration and engineering for new technologies within critical business functions across multiple security domains.
Lead the integration of multiple security solutions to ensure the finished product aligns with enterprise security initiatives and compliance requirements.
Mentor enterprise security staff during incident resolution and remediation analysis to improve efficiency and personnel knowledge.
Contribute to the preparation and implementation of information security policies, standards, procedures, and guidelines.
Contribute to the design and operation of monitoring and improvement activities to ensure ongoing compliance with internal security policies and applicable laws and regulations.
Collaborate with appropriate personnel across ONE Gas to identify appropriate risk levels for information assets.
Collaborate with leadership in planning and budgeting enterprise security projects.
Maintain regular and reliable attendance.
Perform additional duties as assigned.