Sr. Manager, Information Security Administration
About The Position
The Sr. Manager, Information Security Administration leads the day-to-day operations of AIA’s security program and tooling, reporting to the Managing Director, Infrastructure, Security, and Customer Success. The role emphasizes the strategic use of automation and AI-driven technologies to strengthen security operations and ensure alignment with organizational security goals, policies, and procedures. This position manages and optimizes security technologies, improves threat detection and response, administers security and compliance platforms, and identifies and mitigates risks. It investigates and remediates security incidents and vulnerabilities, contributes to new security solutions and security policies, standards, and procedures, and supports security awareness and training. It also works with product development teams to embed security into the software development lifecycle. The role supports AIA staff, AIA Components, and technology and consulting partners and vendors. The position is hybrid-remote and limited to the Washington, DC metro area (DC, MD, VA). After-hours support and response to critical or emergency duties are required as needed.
Requirements
- Bachelor’s degree in computer science, information systems, computer engineering, system analysis, programming, or a related field.
- At least 7 years of hands-on cybersecurity work experience.
- Extensive experience with security monitoring, protection, detection, and response methodologies and solutions, and with managing vulnerability assessment and remediation activities.
- Demonstrated knowledge and experience with security dashboard development, assessment of IT security activities, security awareness training, SIEM, Office 365 Security and Compliance, Azure Active Directory, and permissions management.
- Working technical knowledge of Windows, firewall/IDPS, wireless platforms, antivirus, IAM methods, patch management, SSO, MFA, scripting, infrastructure-as-code, container security, and network concepts and protocols.
- Knowledge of PCI DSS compliance, data privacy, NIST, security risk management processes, DLP policy implementation, AWS cloud security, and Red Hat Linux operating systems architecture.
- Familiarity with CI/CD platforms such as GitHub Actions and working knowledge of OWASP Top 10 and secure SDLC frameworks.
- Proven analytical and problem-solving abilities.
- Ability to prioritize and execute tasks effectively in a fast-paced, changing environment.
- Strong customer service attitude, attention to detail, and excellent oral and interpersonal skills.
- Demonstrated ability to achieve individual and team goals.
- Available to provide after-hours support and respond to critical or emergency response duties as needed.
Responsibilities
- Administer and manage security monitoring tools for real-time threat detection and alerting; investigate and validate incidents flagged by automated systems; escalate critical threats and coordinate incident response.
- Conduct vulnerability scanning, penetration testing, and/or risk analysis; assist with internal audits and threat hunting; review phishing reports and indicators of compromise.
- Fine-tune security tools, threat detection logic, alerts, and integrations to improve operational efficiency.
- Monitor and manage security in on-premises, Azure, and AWS environments; enforce cloud security policies, encryption standards, and access controls; audit configurations and use cloud-native monitoring and alerting tools.
- Collaborate with product development teams on security design reviews and review application, cloud service, CI/CD, and infrastructure-as-code configurations before release and periodically thereafter.
- Help define and maintain security guardrails, secure coding standards, and development baselines; triage, prioritize, track, and coordinate remediation of security findings.
- Collaborate with system owners to review IAM controls and enforce least privilege; support identity onboarding, access provisioning, periodic access reviews, and privileged access audits.
- Assist with privacy management platforms and organize evidence for compliance assessments, internal audits, and regulatory reviews, including PCI, GDPR, and NIST-related work.
- Support monthly security newsletters, targeted campaigns, and staff training; promote information security and privacy best practices.
- Develop and maintain security operations SOPs, workflows, processes, and incident response playbooks.
- Document and deliver monthly reports on security tool and measure performance; keep documentation and the internal technology intranet site accurate and accessible.
- Handle and resolve security tickets, including user requests, access and permission changes, and escalations, in accordance with SLAs and in a timely, secure manner.
- Stay current on security and information technology trends, threats, and best practices; perform other related duties as assigned or necessary.
- Provide after-hours support and respond to critical or emergency duties as needed.
Benefits
- Medical, vision, and dental coverage
- 401(k)
- Flexibility
- Paid time off
- Flexible spending accounts
- Life insurance coverage up to 2x salary and disability plans at no cost
- Tuition and membership reimbursements
- Employee Assistance Program for employees and family members
- SmartBenefits transportation program, including up to $55 monthly for public transportation and pretax METRO parking
- Computer purchase program
- Fitness club discounts
- Prepaid legal services program
- Identity theft protection
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
