Security Manager Jobs

About The Position

Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related field; an equivalent combination of education and work experience will also be considered.
• At least 8 years of IT operations experience with progressive cybersecurity experience in a corporate or nonprofit environment.
• Strong knowledge of cybersecurity technologies and best practices.
• Proficiency in administering security tools and systems.
• Strong problem-solving and analytical skills.
• Effective communication and interpersonal abilities.
• Detail-oriented, with a focus on accuracy.
• Ability to work independently and collaboratively in a team environment.
• Commitment to Audubon’s organizational values of care, collaboration, change, integrity, impact, and innovation.

Nice To Haves

• Experience with Defender for Endpoint and Defender for Identity.
• Experience with Okta.
• Experience with SonicWall firewall hardware.
• Experience with distributed network environments.
• AWS, Azure, or public cloud expertise.
• Experience with SecDevOps best practices.
• Experience fostering inclusive and collaborative work environments.

Responsibilities

• Partner with the Chief Technology Officer, Senior Director of Information Technology, and vCISO to assess and respond to security incidents.
• Monitor and respond to security alerts and incidents in accordance with policy service-level agreements.
• Investigate, analyze, and document security incidents following chain-of-custody processes, and implement appropriate countermeasures.
• Evaluate, procure, administer, and manage security tools and supporting vendor services, including password managers, phishing threat management, firewalls, IDS/IPS, endpoint management, EDR, MDR, antivirus, document management, and SIEM solutions.
• Monitor, update, and fine-tune security systems to improve their effectiveness.
• Lead the vendor security review process in partnership with the vCISO.
• Assist with developing, implementing, reviewing, and enforcing security policies, standards, and procedures guided by ISO 27000 standards.
• Ensure compliance with industry-specific regulations and standards, including PCI, and coordinate and participate in regular audits.
• Administer the Identity Provider to manage user accounts, permissions, and access levels across systems according to IAM workflows.
• Maintain system role-mapping documentation and lead and coordinate regular entitlement reviews as needed.
• Implement, administer, and manage MFA and SSO solutions.
• Oversee scheduled vulnerability scans and penetration tests, and coordinate remediation with relevant teams.
• Curate and oversee the employee security awareness program and portal, provide specialized security-hygiene training, and oversee phishing tests and remediation training.
• Maintain accurate and current security documentation, including incident reports, policies, procedures, and configurations.
• Collaborate with cross-functional teams to align security measures with business objectives and communicate risks and recommendations to management and relevant stakeholders.
• Lead facilitation of the IT Security Operations working group and participate in Architectural Review Board meetings.
• Assist cloud and network administration teams with server configurations to limit access, mitigate intrusions, and protect assets.
• Assist cloud and network administration teams with network-device configurations and topology to protect access points and data, including firewalls, routing, and ACLs.
• Maintain and foster a culture of safety.
• Perform other job-related duties as assigned.