Job Summary
The Manager, Information Security is responsible for maintaining and executing our cyber security strategy, ensuring compliance with regulations, managing incident response efforts, and implementing effective security controls to protect the organization’s digital assets. They lead cross-functional teams and our third-party providers and foster a culture of security awareness to mitigate cyber risks and safeguard critical information.
Job Responsibilities
- Develop, update, and maintain IT security policies, standards, and procedures in alignment with industry best practices and regulatory requirements.
- Ensure dissemination and adherence to security policies across the organization.
- Leads/inspires project team(s) to deliver company strategy and purpose through clear blueprints and roadmaps
- Plays a key role in shaping the overall IT strategy
- Ensure overall security of assets and databases
- Provide direction for the day-to-day operation of the Information Security team and be a liaison of information from executives to officers, or vice versa.
- Identify security issues or concerns throughout the organization and provide integrative solutions to create a safer environment.
- Delegate projects, reports, investigations, etc., to information security staff.
- Maintain accurate records of security-related activities, prepare reports, and assist in the generation of metrics to measure the effectiveness of information security measures.
- Stay abreast of evolving security threats & vulnerabilities & provide recommendations for maintaining compliance.
- Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures.
Job Requirements
- Bachelor of Science in Cybersecurity, information technology, or related
- 5-8 years directly related experience, 3+ years’ IT leadership/supervisory experience
- Previous experience working within a retail environment, including point-of-sale systems
- Proven experience in IT security, risk management, and policy development.
- Experience with security technologies, including firewalls, intrusion detection/prevention systems, VPNs, etc.
- Excellent understanding of regulatory requirements and industry best practices.
- Team Leadership and Collaboration: Strong leadership skills, including the ability to motivate and manage a diverse team, are essential.
