Manager, Information Security

Redstone Federal Credit Union•Huntsville, AL

About The Position

Under the direction of the Sr. AVP, Information Security, the Manager, Information Security plans, organizes, integrates, manages, and evaluates the day-to-day activities of the Credit Union’s Information Security Department while maintaining advanced technical knowledge and hands-on capabilities. The role administers and manages the acquisition, installation, and maintenance of the information security infrastructure, including SIEM and threat intelligence systems. It secures data, monitors system usage, manages access rules and permissions, and provides direct support for complex security investigations, incidents, and operational activities when needed. The manager oversees strategic planning and project implementation, directs departmental business continuity planning, and manages security controls for an organization-wide information security program that preserves the availability, integrity, and confidentiality of information assets. The position participates in the Cybersecurity Incident Response Team during security events and serves as a backup on the change management team. This role leads and develops security staff, oversees security monitoring and detection across enterprise and cloud technologies, and ensures incidents and vulnerabilities are investigated, escalated, documented, and remediated. It develops and recommends security policies, procedures, systems, and tools; supports regulatory and audit compliance; advises on security controls for current and future systems; and drives security automation, process improvement, and technology enhancements. The role requires a bachelor’s degree in a relevant discipline, at least five years of progressively responsible experience in information security or a related field, and at least two years of management or supervisory experience. An equivalent combination of education and experience may be considered. A relevant security certification is strongly preferred, and PCI DSS knowledge is a plus. The position works in a general office environment and includes intermittent standing, sitting, walking, bending, and climbing, repetitive use of hands and arms, and lifting or carrying up to 25 pounds.

Requirements

Bachelor’s degree in Information Security, Information Technology, Information Systems, Computer Science, or a closely related field; an equivalent combination of education and experience may be considered.
At least 5 years of progressively responsible experience in information security, cybersecurity, information technology, security operations, or a related discipline, including experience with enterprise security technologies, controls, risk management, incident response, and regulatory or compliance requirements.
At least 2 years of management or supervisory experience, including employee development, performance management, work prioritization, and operational oversight.
Ability to apply customer service practices and processes to meet quality standards and achieve member satisfaction.
Ability to engage, lead, educate, influence, and collaborate across the enterprise.
Troubleshooting skills for computer hardware, software, processing problems, errors, security events, and failures.
Ability to interpret and communicate technical information, business processes, and vulnerability information to technical and non-technical audiences.
Understanding of information security principles and practices, including analysis, development, testing, and implementation.
Ability to understand business asset-protection requirements and deliver cost-effective technical solutions.
Ability to learn and apply information about Credit Union products, services, and regulatory compliance requirements.
Ability to resolve problems using advanced knowledge and experience.
Professional communication, active listening, tact, and diplomacy, including in sensitive and confidential situations.
Correct English spelling, grammar, and punctuation.
Ability to use computers, business software, and standard office equipment; understand and follow written and oral instructions; and set priorities and manage time effectively.
Ability to meet the stated physical requirements, including lifting and carrying up to 25 pounds, with reasonable accommodation where applicable.

Nice To Haves

Knowledge of PCI DSS (Payment Card Industry Data Security Standards).
A relevant information security certification is strongly preferred, such as CISSP, CISM, CEH, GCIH, or a related security certification.

Responsibilities

Lead, manage, develop, and retain competent, member service-oriented security staff; establish performance objectives, monitor performance, coach employees, recognize strong performance, and address deficiencies in accordance with policy.
Plan, organize, evaluate, and manage departmental work, resources, programs, processes, and procedures, coordinating with other Credit Union functions.
Lead implementation of secure enterprise systems and identify risks to the confidentiality, integrity, and availability of data.
Develop and recommend security policies, protocols, systems, and tools, including endpoint security, next-generation antivirus, EDR, cloud security, web content filtering, network security, vulnerability and patch management, and remote access standards.
Manage the technical performance of security monitoring and logging systems, alert reliability, log-retention practices, incident review and reporting, vendor patches and upgrades, and vulnerability remediation coordination.
Oversee security monitoring and detection across SIEM, firewall, endpoint, cloud, and other security technologies; ensure significant events are investigated, escalated, documented, and remediated.
Provide internal security consulting by reviewing controls for current and future systems and products and identifying risks to data integrity and security.
Respond promptly to information security incidents to minimize potential losses of information assets.
Collaborate with FS-ISAC and other intelligence-sharing agencies to implement effective threat intelligence and information-sharing capabilities.
Ensure audit trails, system logs, and monitoring data are reviewed periodically and comply with policies, procedures, and audit requirements.
Oversee and enhance security operations to detect, analyze, respond to, and track threats and vulnerabilities.
Identify and sponsor opportunities for security automation, orchestration, and process improvement.
Recommend changes to the Information Security Program, ensure appropriate data classification and compliance, and maintain an ongoing security awareness program.
Participate in the Cybersecurity Incident Response Team and provide management coordination and operational leadership during security events; serve as a backup to the Sr. AVP of Information Security on the change management team.
Evaluate and provide management direction for significant security technology upgrades, enhancements, architectural changes, and control improvements.
Oversee the implementation and effectiveness of cloud-based environments, including AWS, Azure, and other platforms used by the Credit Union and its vendors.
Analyze technologies and establish processes and protocols to prevent unauthorized access to company networks and systems.
Recruit actively, lead by example, and foster a culture that supports employee retention.
Comply with applicable laws, regulations, Credit Union policies and procedures, security requirements, confidentiality requirements, and required training; maintain punctuality and perform other related duties as assigned.