Manager of IT Security

Do it Best•Dallas, TX

5d•Onsite

About The Position

The Manager, IT Security is a strategic leadership role responsible for overseeing Do It Best’s information, cyber, and technology security. S/he will develop, implement and manage the company’s IT security strategies and operations. This role is vital to safeguarding the integrity, confidentiality, and availability of the organization's information assets. The position reports directly to the Director of Infrastructure/Operation/Security and works closely with other IT leaders, business unit heads and external stakeholders to ensure that IT security practices align with the organization's goals and regulatory requirements.

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent.
Minimum of 10 years of experience in a combination of IT security and IT management roles, with at least 7 years in a team leadership position.
Extensive knowledge of information security concepts, practices, and technologies, including risk assessment methodologies, policy formation, role-based authorization methodologies, authentication technologies, and security attack pathologies.
Excellent understanding of national and international laws, regulations, policies, and ethics related to IT security.
Strong leadership and communication skills, with the ability to articulate complex security concepts to non-technical stakeholders at the highest levels of the company and to customers.
Demonstrated ability to develop and maintain strong working relationships with a variety of stakeholders, including senior executives, IT personnel, customers and external partners.

Nice To Haves

Minimum 5 years experience representing a company’s security posture to government agencies and Board-level positions, is strongly preferred.

Responsibilities

Develop and implement a comprehensive IT security strategy that aligns with the organization's objectives and risk tolerance.
Lead the IT security team in identifying, developing, implementing, and maintaining security processes across the organization to reduce information and IT risks, respond to incidents, and limit exposure to liability in all areas of financial, physical, and personal risk.
Advise the VP of IT and other senior management on security direction and resource investments to secure information assets and technologies effectively.
Conduct regular risk assessments to identify vulnerabilities, assess potential impacts, and implement appropriate mitigation strategies.
Develop and maintain an IT security risk management program, including frameworks for risk assessment and risk treatment plans.
Develop, maintain, and oversee the organization's information security policies, standards, and procedures to ensure they are up-to-date with evolving cybersecurity threats and compliance requirements.
Ensure compliance with legal, regulatory, and contractual security obligations and best practices.
Lead the development and implementation of an incident response plan and breach notification process that can be executed with speed and accuracy.
Oversee the investigation of security breaches and assist with disciplinary and legal matters associated with such breaches.
Oversee the operation of all IT security measures, including firewalls, anti-virus software, patch management systems, and intrusion detection/prevention systems.
Evaluate and recommend new security technologies and countermeasures against threats to information assets.
Lead, mentor, and develop the IT security team, fostering a culture of continuous improvement, collaboration, and high performance.
Define clear team goals and KPIs, conducting regular reviews to ensure alignment with the organization's strategic objectives.
Collaborate with IT and business leaders to ensure security projects and measures are aligned with business objectives.
Serve as the primary contact for external agencies and auditors regarding IT security matters.