Senior Manager, IT Security Operations
About The Position
We are seeking a highly skilled and motivated Senior Manager, IT Security Operations to join our team. As the Senior Manager, IT Security Operations, you will play a crucial role in safeguarding our organization’s assets, ensuring the integrity and confidentiality of sensitive information, and maintaining the overall security posture of our systems and networks. This position is classified as hybrid preferred. Hybrid employees are expected to work in an Audubon office every Monday and Tuesday and an additional two days each month of the employee’s choosing. Remote work within the United States may be considered only for candidates not within commuting distance of an Audubon office, in accordance with Audubon’s “Where We Work” Policy. Audubon offices include locations in: Albuquerque, NM; Albany, NY; Anchorage, AK; Baltimore, MD; Charleston, SC; Chicago, IL; Columbia, SC; Fargo, ND; Fort Collins, CO; Lincoln, NE; Miami, FL; New Orleans, LA; New York, NY; Oakland, CA; Palm Desert, CA; Roseville, MN; Sacramento, CA; Salt Lake City, UT; Tallahassee, FL; and Washington, DC.
Requirements
- Bachelor's degree in Information Security, Computer Science, or a related field.
- Minimum 8 years of experience with IT operations with progressive experience in cybersecurity in a corporate or non-profit environment. An equivalent combination of education and work experience will also be considered.
- Strong knowledge of cybersecurity technologies and best practices.
- Proficiency in administering security tools and systems.
- Excellent problem-solving and analytical skills.
- Effective communication and interpersonal abilities.
- Detail-oriented with a focus on accuracy.
- Ability to work both independently and collaboratively in a team environment.
- Commitment to Audubon’s organizational values of care, collaboration, change, integrity, impact, and innovation.
- Experience fostering inclusive and collaborative work environments is valued.
Nice To Haves
- Experience with Defender for Endpoint, and Defender for Identity preferred.
- Experience with Okta preferred.
- Experience with Sonicwall FW hardware preferred.
- Experience with distributed network environments preferred.
- AWS / Azure / Public cloud expertise preferred.
- Experience with SecDevOps best practices preferred.
Responsibilities
- Partner with Chief Technology Officer, Senior Director of Information Technology, and Virtual Chief Information Security Officer (vCISO) to assess and respond to security incidents.
- Monitor and respond to security alerts and incidents compliant with service level agreements outlined by policy.
- Investigate, analyze, and document security incidents compliant with “chain of custody” processes, and implement appropriate countermeasures.
- Evaluate, procure, administer, and manage security tools and supporting vendor services, including but not limited to password managers, phishing threat management, firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint management, endpoint detection and response (EDR), managed detection and response (MDR), antivirus, document management, and Security Information and Event Management (SIEM) solutions.
- Regularly monitor, update, and fine-tune security systems to enhance effectiveness.
- Lead vendor security review process in partnership with vCISO.
- Assist in the development, implementation, review, and enforcement of security policies, standards, and procedures guided by ISO 27000 standards.
- Ensure compliance with industry-specific regulations (e.g., PCI) and standards and coordinate and participate in regular audits.
- Administer Identity Provider (IdP) to manage user accounts, permissions, and access levels across various systems, following Identity and Access Management (IAM) workflows.
- Maintain system role mapping documentation and lead and coordinate regular entitlement reviews as necessary.
- Implement, administer, and manage multi-factor authentication (MFA) and single sign-on (SSO) solutions.
- Oversee scheduled vulnerability scans and penetration tests.
- Coordinate with relevant teams to remediate identified vulnerabilities.
- Curate and oversee security awareness program and portal for employees.
- Provide specialized training on best practices for security hygiene.
- Oversee phishing test program and remediation training program.
- Maintain accurate and up-to-date security documentation, including incident reports, policies, procedures, and configurations.
- Collaborate with cross-functional teams to ensure security measures align with overall business objectives.
- Communicate security risks and recommendations to management and relevant stakeholders.
- Act as lead facilitator of IT Security Operations working group and participate in Architectural Review Board meetings.
- Assist cloud and network administration team with configurations and function of servers to limit access, mitigate intrusions, and protect assets.
- Assist cloud and network administration team with configurations and topology of network devices to safeguard points of access and data security, including firewalls, routing, and ACLs.
- Maintain and foster culture of safety.
- Other job-related duties as assigned.
Benefits
- Salary range based on geo-differentials
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
