Manager - Information Security & Compliance

Holman•Remote - NJ, NJ

2d•$120,730 - $187,130•Remote

About The Position

Holman is hiring a Manager - Information Security & Compliance to develop and maintain the organization’s security program and governance, risk, and compliance program. The role maintains security organizational profiles, data inventories, threats, and risks across Holman companies, and advises management on best practices, trends, and changes in internal and external threats. It develops or proposes policy and procedure changes, delivers security communications and training, and consults with Technology and business teams to incorporate security into hardware, software, and vendor decisions. The manager plans and conducts organizational, compliance, risk, program, system, policy, incident-response, and general security assessments; manages responses to information security incidents; and monitors policy compliance, reporting infringements to Senior Management. The role also manages information security professionals, including hiring, training, performance reviews, leadership, and coaching.

Requirements

5–7+ years of information security experience.
3+ years in a management or leadership role.
Strong experience developing and executing security architecture and strategies, including strategic, tactical, and project-level plans.
Strong experience with common information security frameworks, such as ISO 2700x, ITIL, COBIT, NIST 800-53, and Center for Internet Security Critical Security Controls.
Familiarity with applicable legal and regulatory requirements, including the U.S. Sarbanes-Oxley Act, FTC Data Safeguards, PCI, GDPR, and PIPEDA.
Working knowledge of technology tools used to manage and perform security and compliance functions.
Four-year college degree or demonstrated equivalent experience as determined by department management.

Nice To Haves

Security certifications such as CISMP, GIAC, CISA, CISM, or ISACA.

Responsibilities

Develop and maintain a security program and execute initiatives addressing identified risks and security requirements.
Develop and maintain a security-focused governance, risk, and compliance program.
Maintain security organizational profiles, data inventories, threats, and risks for Holman companies.
Advise management on best practices, current trends, and changes in internal and external threats and opportunities; present and influence action plans.
Develop or propose changes to policies and procedures to support operating efficiency and regulatory compliance.
Provide security communication, awareness, and training for audiences ranging from senior leaders to field staff.
Consult with Technology and business teams to ensure security is considered in evaluating, selecting, installing, and configuring hardware, purchased or developed software, and vendors.
Plan and conduct organizational, compliance, risk, program, system, policy, incident-response, and general security assessments.
Manage the organization’s response to information security incidents.
Monitor compliance with information security policies and communicate and report infringements to Senior Management.
Manage information security staff, hire and train new employees, and conduct performance reviews.
Provide leadership and coaching, including technical and personal development programs.