IT Security Manager

We are seeking an experienced and proactive IT Security Manager to lead the organization's cybersecurity initiatives and safeguard critical systems, networks, and data. In this role, you will develop and implement security strategies, oversee risk management, ensure regulatory compliance, and lead incident response efforts. The ideal candidate is a strategic thinker with strong technical expertise and leadership experience in information security.

Key Responsibilities

Develop, implement, and maintain the organization's information security strategy, policies, and procedures.

Lead cybersecurity operations to protect company systems, networks, applications, and sensitive data.

Monitor security alerts, investigate incidents, and coordinate incident response and recovery activities.

Conduct risk assessments, vulnerability assessments, and security audits to identify and mitigate potential threats.

Manage firewalls, intrusion detection and prevention systems (IDS/IPS), endpoint protection, and security monitoring tools.

Oversee identity and access management (IAM), including user provisioning, authentication, and privileged access controls.

Ensure compliance with applicable security standards and regulatory requirements, such as NIST, ISO 27001, SOC 2, HIPAA, PCI DSS, or GDPR, as applicable.

Develop and deliver security awareness training programs for employees.

Collaborate with IT, engineering, and business teams to integrate security best practices into projects and daily operations.

Manage third-party security assessments and vendor risk evaluations.

Prepare security reports, metrics, and recommendations for executive leadership.

Stay informed about emerging cybersecurity threats, vulnerabilities, and industry best practices.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.

5+ years of experience in information security, cybersecurity, or IT infrastructure, with at least 2 years in a leadership or management role.

Strong knowledge of network security, cloud security, endpoint protection, vulnerability management, and incident response.

Experience with security tools such as SIEM, EDR, IDS/IPS, firewalls, VPNs, and identity management solutions.

Familiarity with Microsoft 365, Azure, AWS, or Google Cloud security services.

Experience developing and enforcing security policies and procedures.

Excellent analytical, problem-solving, and decision-making skills.

Strong written and verbal communication skills with the ability to explain technical concepts to non-technical audiences.

Benefits

• Paid Time Off
• Work From Home
• Training & Development
• Performance Bonus