Information Security and Compliance Manager

Job Description

The duties and responsibilities of this position shall consist of, but not be limited to, the following:

• Establish strong partner relationships across business and technology areas
• Build and maintain internal applications, capabilities, and tools as needed to address requirements for vulnerability management, incident response, endpoint and network layer Protection, security architecture, and physical security systems
• Effectively design, develop, and deliver technical security solutions that consistently meet Jack Link’s standards as well as business, functional, and security requirements
• Provide hands on technical work as necessary to ensure Jack Link’s Security objectives are met and maintained
• Work with business and technology partners to understand new business strategies and projects and then provide effective security recommendations
• Stay up to date and communicate on security technologies and emerging, risks and trends
• Design and conduct security awareness training along with testing such as simulated phishing campaigns
• Lead incident response and recovery and document resolutions. Use learnings from these incidents to improve Jack Link’s ability to detect attacks and build better protections
• Prioritize and develop the automation and orchestration of routine security tasks
• Develop and maintain documentation that details how supported security systems are designed and how they should be maintained
• Manage vendor relationships to ensure Jack Link’s obtains maximum value for its investments
• Develop team and individual talent within the security organization
• Ensure support functions are performed and delivered effectively and consistently
• Manages and coordinate urgent and complicated support issues
• Perform other duties and responsibilities as necessary
• Participate in the manager on-call rotation
• Travel required 10%

Qualifications

• BS/BA Degree in computer related field or equivalent work experience
• CISSP or CISM certification

Required Experience:

• 2 years minimum in a lead role managing or leading talent
• 5 or more years assessing and reporting status on a security framework like NIST 800-53
• 6 – 8 years minimum information security experience and strong knowledge of modern security systems, engineering tools, analytical tools, architecture, technologies and best practices
• Proven experience securing Microsoft Office 365, network technologies, and Firewalls
• Experience assessing and automating security and compliance tools and processes.
• Previous experience assessing and securing manufacturing environments including OT/IT
• Proven experience automating security tasks
• Experience with incident response and recovery

Preferred:

• Current and deep understanding of physical security systems (CCTV, Access Control, Alarms)
• Previous experience with and deep knowledge of endpoint protection tools like Microsoft Defender
• Previous experience assessing and securing hybrid Azure Cloud deployments
• Previous experience assessing custom software and processes and providing security solutions to meet protection objectives

REQUIRED SKILLS, KNOWLEDGE and ABILITIES:

• A strong desire and drive to work in partnership with the business to develop solutions to security problems that meet both business and security objectives.
• Excellent communication skills – both oral and written (for designing and writing engaging reports which communicate findings succinctly and clearly convey the message in a way which is appropriate for the audience)
• Strong knowledge of systems security best practices and frameworks such as NIST 800-53
• Knowledge of applicable data privacy practices and laws like GDPR & CCPA
• Provide data and reporting of KPI's and trends to IT Management and others.
• Strong customer service orientation
• Valid driver’s license and insurable

Additional Information

All your information will be kept confidential according to EEO guidelines.