Senior Manager, IT Security Operations

National Audubon Society•National Audubon Society Washington, DC

56d•Hybrid

About The Position

The National Audubon Society is seeking a highly skilled and motivated Senior Manager, IT Security Operations to join their team. This role is crucial in safeguarding the organization’s assets, ensuring the integrity and confidentiality of sensitive information, and maintaining the overall security posture of their systems and networks. This position is classified as hybrid preferred, requiring employees to work in an Audubon office every Monday and Tuesday, and an additional two days each month. Remote work within the United States may be considered for candidates not within commuting distance of an Audubon office. Audubon offices are located in various cities across the US.

Requirements

Bachelor's degree in Information Security, Computer Science, or a related field.
Minimum 8 years of experience with IT operations with progressive experience in cybersecurity in a corporate or non-profit environment.
An equivalent combination of education and work experience will also be considered.
Strong knowledge of cybersecurity technologies and best practices.
Proficiency in administering security tools and systems.
Excellent problem-solving and analytical skills.
Effective communication and interpersonal abilities.
Detail-oriented with a focus on accuracy.
Ability to work both independently and collaboratively in a team environment.
Commitment to Audubon’s organizational values of care, collaboration, change, integrity, impact, and innovation.
Experience fostering inclusive and collaborative work environments is valued.

Nice To Haves

Experience with Defender for Endpoint, and Defender for Identity preferred.
Experience with Okta preferred.
Experience with Sonicwall FW hardware preferred.
Experience with distributed network environments preferred.
AWS / Azure / Public cloud expertise preferred.
Experience with SecDevOps best practices preferred.

Responsibilities

Partner with Chief Technology Officer, Senior Director of Information Technology, and Virtual Chief Information Security Officer (vCISO) to assess and respond to security incidents.
Monitor and respond to security alerts and incidents compliant with service level agreements outlined by policy.
Investigate, analyze, and document security incidents compliant with “chain of custody” processes, and implement appropriate countermeasures.
Evaluate, procure, administer, and manage security tools and supporting vendor services, including but not limited to password managers, phishing threat management, firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint management, endpoint detection and response (EDR), managed detection and response (MDR), antivirus, document management, and Security Information and Event Management (SIEM) solutions.
Regularly monitor, update, and fine-tune security systems to enhance effectiveness.
Lead vendor security review process in partnership with vCISO.
Assist in the development, implementation, review, and enforcement of security policies, standards, and procedures guided by ISO 27000 standards.
Ensure compliance with industry-specific regulations (e.g., PCI) and standards and coordinate and participate in regular audits.
Administer Identity Provider (IdP) to manage user accounts, permissions, and access levels across various systems, following Identity and Access Management (IAM) workflows.
Maintain system role mapping documentation and lead and coordinate regular entitlement reviews as necessary.
Implement, administer, and manage multi-factor authentication (MFA) and single sign-on (SSO) solutions.
Oversee scheduled vulnerability scans and penetration tests.
Coordinate with relevant teams to remediate identified vulnerabilities.
Curate and oversee security awareness program and portal for employees.
Provide specialized training on best practices for security hygiene.
Oversee phishing test program and remediation training program.
Maintain accurate and up-to-date security documentation, including incident reports, policies, procedures, and configurations.
Collaborate with cross-functional teams to ensure security measures align with overall business objectives.
Communicate security risks and recommendations to management and relevant stakeholders.
Act as lead facilitator of IT Security Operations working group and participate in Architectural Review Board meetings.
Assist cloud and network administration team with configurations and function of servers to limit access, mitigate intrusions, and protect assets.
Assist cloud and network administration team with configurations and topology of network devices to safeguard points of access and data security, including firewalls, routing, and ACLs.
Maintain and foster culture of safety.
Other job-related duties as assigned.