Manager, IT Security

Job Purpose

Lead the organization's IT security program, which includes managing the security log environment, incident response planning and preparedness, and developing technical cybersecurity standards, procedures, and architectural references for the IT department. The IT Security Manager will serve as an integral member of the IT infrastructure and cybersecurity team providing security consulting and subject matter expertise. This role will also provide security-based guidance to IT and other departments to ensure that IT systems and networks are secure.

Primary Functions

Provide subject matter expertise and consulting for the strategic design of the organization's IT security and manage the IT security program; Develop technical cybersecurity policies, standards, procedures, and architectural references for the IT department aligned with the enterprise cybersecurity policies; Analyze operational security needs and contribute to the proposal, development, design, integration, and installation of security systems and applications; Manage and set priorities for the monitoring and maintenance of the security infrastructure and security technologies; Work with the Director of Cybersecurity to develop incident response plans and procedures, and ensure that IT staff are trained to respond to security incidents effectively; Manage the security log environment and ensure that logs are collected, analyzed, and monitored for potential security incidents; Ensure that cybersecurity threat monitoring is conducted 24 hours a day with alerts and respond as needed; Collaborate with cybersecurity, legal, internal audit, and other stakeholders to maintain compliance with established security policies and governance; Prepare educational materials and disseminate messages and updates on cybersecurity threat prevention techniques to all OUC staff on a regular basis; Act as an ongoing security consultant and subject matter expert to IT and other departments to ensure that IT systems and networks are secure; Stay up to date with the latest cybersecurity threats, vulnerabilities, and industry best practices; Develop threat assessment implementation timelines and perform ongoing cybersecurity assessments and vulnerability scans to identify potential security risks in collaboration with other IT departments; Collaborate with Infrastructure teams (network, server, desktop, service desk) to develop and implement security controls to mitigate identified security risks; Plan and execute incident response and recovery processes, including developing incident response plans, conducting tabletop exercises, and coordinating with internal and external stakeholders during an incident; Develop the annual IT Security budgets and Operational Plan; Provide guidance and support on IT Security to IT project teams to ensure that security considerations are integrated into project plans and design specifications; Manage external security vendor partnerships including assessing and mitigating potential security risks from third-party vendor relationships; Perform other duties as assigned.