information security manager

Watermark Risk Management International

<div>Come make your mark with Watermark!<div>
️ FOUNDED BY USAF VETERANS in 2007, we are proud to be a Service-Disabled Veteran Owned Small Business. 
 SUBJECT MATTER EXPERTS specializing in security and risk management. We&rsquo;re intimately familiar with DOD security programs and mission requirements. 
<ul><li>OUR CORE VALUES drive every action we take as a company. We strive to exhibit PERSPECTIVE, PASSION, COMMUNICATION, INTEGRITY AND ETHICS, and BALANCE in all we do.</li></ul>
 COMPETITIVE BENEFITS PACKAGE to address our employees&rsquo; physical, mental, emotional, and financial well-being. This includes 100% employer- paid medical insurance, ample paid leave, a free employee assistance program, and a competitive 401k savings plan. At Watermark, our people come first!
</div>Information Systems Security Manager I
The ISSM&rsquo;s primary function serves as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. Primary support will be working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense, and Military Compartment efforts. The position will provide &ldquo;day-to-day&rdquo; support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.
In this role you will&hellip;<ul><li>
Perform oversight of the development, implementation and evaluation of information system security program policy; special emphasis placed upon integration of existing SAP network infrastructures</li><li>
Develop and oversee operational information systems security implementation policy and guidelines of network security, based upon the Risk Management Framework (RMF) with emphasize on Joint Special Access Program Implementation Guide (JSIG) authorization process</li><li>
Advise customer on Risk Management Framework (RMF) assessment and authorization issues</li><li>
Perform risk assessments and make recommendations to DoD agency customers</li><li>
Advise government program managers on security testing methodologies and processes</li><li>
Evaluate authorization documentation and provide written recommendations for authorization to government PMs</li><li>
Develop and maintain a formal Information Systems Security Program</li><li>
Ensure that all IAOs, network administrators, and other cyber security personnel receive the necessary technical and security training to carry out their duties</li><li>
Develop, review, endorse, and recommend action by the AO or DAO of system assessment documentation</li><li>
Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media</li><li>
Develop and execute security assessment plans that include verification that the features and assurances required for each protection level functioning</li><li>
Maintain a and/or applicable repository for all system authorization documentation and modifications</li><li>
Institute and implement a Configuration Control Board (CCB) charter</li><li>
Develop policies and procedures for responding to security incidents, to include investigating and reporting security violations and incidents</li><li>
Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered within a system</li><li>
Ensure that data ownership and responsibilities are established for each authorization boundary, to include accountability, access rights, and special handling requirements</li><li>
Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local cyber security training.</li><li>
Evaluate threats and vulnerabilities to ascertain whether additional safeguards are needed</li><li>
Assess changes in the system, its environment, and operational needs that could affect the authorization</li><li>
Ensure that authorization is accomplished a valid Authorization determination has been given for all authorization boundaries under your purview</li><li>
Review AIS assessment plans</li><li>
Coordinate with PSO or cognizant security official on approval of external information systems (e.g., guest systems, interconnected system with another organization)</li><li>
Conduct periodic assessments of the security posture of the authorization boundaries</li><li>
Ensure configuration management (CM) for security-relevant changes to software, hardware, and firmware and that they are properly documented</li><li>
Ensure periodic testing is conducted to evaluate the security posture of IS by employing various intrusion/attack detection and monitoring tools (shared responsibility with ISSOs)</li><li>
Ensure that system recovery and reconstitution processes developed and monitored to ensure that the authorization boundary can be recovered based on its availability level determination</li><li>
Ensure all authorization documentation is current and accessible to properly authorized individuals</li><li>
Ensure that system security requirements are addressed during all phases of the system life cycle</li><li>
Develop Assured File Transfers (AFT) on accordance with the JSIG</li><li>
Participate in self-inspections</li><li>
Conduct the duties of the Information System Security Officer (ISSO) if one is not present and/or available</li><li>
Additional duties as assigned</li></ul>
Experience Requirements:<ul><li>
5 - 7 years related experience</li><li>
Prior performance in roles such as ISSO or ISSM</li></ul>
Education Requirements:<ul><li>
Bachelor&rsquo;s degree in a related area OR Associate&rsquo;s degree in a related area + 2 years&rsquo; experience OR equivalent experience (4 years)</li></ul>
Certification Requirements:<ul><li>
Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level II or Information Assurance Manager Level I within 6 months of the date of hire.</li></ul>
Security Clearance Requirements:<ul><li>
Current Top Secret Clearance with SCI Eligibility</li><li>
Eligibility for access to Special Access Program Information</li><li>
Willingness to submit to a Counterintelligence polygraph</li></ul>
Other Requirements:<ul><li>
Reports to a physical location which occasionally requires the ability to traverse between buildings</li><li>
May require sedentary work at least 50% of the time</li><li>
Ability to manage stress with a high degree of maturity/professionalism</li><li>
Demonstrated critical thinking and leadership skills and the ability to work well with others</li><li>
Effective verbal and written communication skills</li><li>
All Level I &amp; Level II positions - candidate should possess some Special Access Program (SAP) experience</li><li>
All Level III positions -candidate should possess 2+ years of Special Access Program (SAP) experience</li></ul>
KEYWORDS: RMF, Risk Management Framework, ICD, Information Assurance, IA, IAO, IAT, IAM, A&amp;A, A+, Network+, Security+, Non-classified Internet Protocol Router Network (NIPRNet), Secret Internet Protocol Router Network (SIPRNet), DISA Security Technical Implementation Guides (STIGs), CISSP, CASP 
Watermark provides salary ranges with job postings in states where it is legally required; any other salary ranges associated with our postings are third party estimates and may not be an accurate reflection of Watermark&rsquo;s total compensation package. Multiple considerations are taken into account when determining the final salary/hourly rate, including but not limited to, Contract Wage Determination, education and certifications, relevant work experience, related skills and competencies, as well as Federal Government Contract Labor Categories. Central to Watermark&rsquo;s employment philosophy is the wellbeing of our employees which is why we offer a robust benefits package and wellness program alongside of annual base compensation.
Watermark is an equal opportunity employer. All terms and conditions of employment are established without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, veteran status, or any other protected category under applicable federal, state, and local laws.
XhbVy4s4Fb</div>

ISSM I - Information Systems Security Manager

Morrison Products, Inc.

<div><div>Summary: 
We are looking for an experienced Security and Compliance Manager who will ensure that our data privacy policies, operations, and systems comply with all relevant state and federal laws and best cybersecurity practices. Reports to the Director of IT.</div>
<div></div><div>Primary Responsibilities: 
Some of your main responsibilities will include improving our organization&rsquo;s security and compliance procedures, conducting risk assessments and audits to establish the effectiveness of our current security systems, and minimizing the impact of potential security breaches and incidents. Working closely with the IT department, you will be responsible for developing and maintaining our security architecture and performing timely security audits. Our ideal candidate should have an in-depth understanding of data privacy laws and other relevant state and federal regulations, as well as cybersecurity best practices.</div>
<div></div><ul><li>Review and update our current information security and privacy policies.</li><li>Create and oversee the implementation of new security and compliance policies and procedures.</li><li>Carry out regularly scheduled security functions, such as network scans, vulnerability scans, and security-log reviews. (Pen Testing, etc.)</li><li>Conduct assessments and audits to measure the efficiency of our compliance and security systems.</li><li>Evaluate and document disaster recovery programs to ensure better response in cases of security incidents and breaches.</li></ul>
<ul><li>Advise the Director of IT and other executives on the best strategies for optimizing the security of data systems, information assets, and general business processes.</li></ul>
<ul><li>Keep up to date with external security and compliance regulations and data privacy and security best practices to lead the improvement of internal security and compliance policies and procedures as required.</li><li>Conduct regular training sessions and workshops to educate employees about the latest information security and compliance policy updates.</li><li>Collaborate with vendors to ensure proper data handling security measures and adherence to all licensing requirements.</li><li>Report security breaches to management for prompt resolution.</li></ul>
<div></div><div>Supervisory Responsibility: 
None currently.</div>
<div></div><div>Travel: 
Some travel may be required for meetings/company sites for training and auditing. 
 
Education Required: 
Bachelor&rsquo;s degree in Business Administration, IT, Human Resources, or any related field.</div>
<div></div><div>Experience Required: 
5 years of experience in a Compliance, Risk Management, or Cybersecurity role. Preferably 2 years of experience as a Compliance Manager or another related supervisory role. Strong understanding of information security and privacy standards and best practices related to data confidentiality. In-depth knowledge of industry-relevant data security and compliance regulations. Excellent analytical, data visualization, and communication skills. Experience in IT auditing practices. A CISSP certification will be considered a plus (Certified Information Systems Security Professional)</div></div>

Corporate Information Technology Manager

NKU Technologies Pvt.Ltd.

We are seeking an experienced Identity and Access Management (IAM) Manager to design, build, and lead the enterprise IAM program within a global Information Security organization. Headquartered in the United States, our company operates more than 200 offices worldwide and generates over $2 billion in annual revenue.This role is responsible for transforming and governing the enterprise IAM function, ensuring secure, compliant, and efficient identity lifecycle management across all applications and services. The manager will build and manage a dedicated IAM team and ensure that quarterly access management activities, certifications, and identity controls are consistently executed in alignment with defined security standards, regulatory requirements, and audit expectations.Key Responsibilities<ul><li>Build, lead, and develop a high-performing IAM team responsible for identity governance, administration, and access lifecycle management.</li><li>Own end-to-end coordination of quarterly user access reviews and certifications across all applications and systems, ensuring on-time completion.</li><li>Track and follow up with application owners, IT, and business stakeholders to ensure access review deadlines are consistently met.</li><li>Own the modernization and transformation of the IAM program, including automation and process optimization.</li><li>Maintain accurate records and documentation of access certification cycles for audit and compliance purposes.</li><li>Support identity lifecycle processes (joiner, mover, leaver) by verifying that access changes are properly reviewed and actioned.</li><li>Monitor adherence to least privilege, role-based access control (RBAC), and segregation of duties (SoD) principles.</li><li>Coordinate with HR, IT, application owners, Internal Audit, Legal, Privacy, and Compliance teams on access governance matters.</li><li>Ensure access review evidence and controls align with regulatory and audit requirements including SOX, ISO 27001, SOC 2, GDPR, HIPAA, and PCI DSS.</li><li>Flag and escalate access-related risks such as orphaned accounts, excessive privileges, or missed review deadlines.</li><li>Prepare regular status reports and executive summaries on access review progress and compliance posture.</li><li>Maintain and update IAM process documentation, trackers, and standard operating procedures.</li><li>Support evaluation and use of IAM platforms (e.g., SailPoint, Okta, Microsoft Entra ID, CyberArk, Ping Identity) as needed for review activities.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Security, Computer Science, or related field (Master&rsquo;s preferred).</li><li>Bachelor&rsquo;s degree in information security, Business Administration, or a related field.</li><li>7 years of relevant experience in IAM, access governance, IT compliance, or related operational roles.</li><li>Strong organizational skills, attention to detail, and ability to manage recurring deadline-driven processes.</li><li>Effective coordination and communication skills for working across multiple stakeholder groups.</li><li>Working knowledge of identity lifecycle management, access certification, and access control concepts (RBAC, SoD).</li><li>Hands-on experience with IAM platforms such as SailPoint, Okta, Microsoft Entra ID (Azure AD), CyberArk, Ping Identity, or Saviynt.</li><li>Strong understanding of compliance frameworks such as SOX, ISO 27001, SOC 2, GDPR, HIPAA, or PCI DSS.</li><li>Relevant certifications (e.g., CISM, CRISC, or IAM-related certifications) are a plus</li><li>Proven experience building and scaling enterprise IAM programs in large, global organizations.</li><li>Strong expertise in IAM governance, identity lifecycle management, access certification, PAM, SSO, MFA, and RBAC.</li><li>Strong understanding of cloud environments (AWS, Azure, GCP) and enterprise security architecture.</li></ul>BenefitsWe offer a competitive compensation package and a comprehensive benefits program including medical, dental, and vision insurance; life and disability coverage; retirement savings plans with company match where applicable; paid time off and holidays; parental leave; wellness and employee assistance programs; flexible work arrangements; professional development support; and global career growth opportunities across our worldwide organization.Equal Employment OpportunityWe are an Equal Opportunity Employer committed to fostering an inclusive and diverse workplace. All employment decisions are made without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other legally protected status.Pay: From Rs350,000.00 per monthWork Location: Remote

Manager – Identity & Access Management (IAM)

The HEINEKEN Company

<div>
 
 Scope of the job
 
 
 
 Job purpose:
 
 
 Global Digital &amp; Technology (D&amp;T) has a worldwide responsibility for all IT processes, solutions and services. The aim is to further enhance HEINEKEN Global Functions by delivering common business driven solutions and services.
 
 
 The Global Information Security department is part of Global D&amp;T and has the overall responsibility of assuring that HEINEKEN&rsquo;s IT Risks are properly managed and information assets &amp; technology is properly secured.
 
 
 The Global Information Security teams include Cyber Defence Operations (CDO), Security Competence Centre (SCC) and Security Chapters (ERP, Enterprise Architecture, Data Privacy, etc) to design, implement, monitor, respond and assist with recovery activities against cyberattacks. They deliver deep security and risk management expertise to enable Product Teams and Global Functions to form a proper 1st Line of Defense (LoD) by building the right capabilities into their products (security by design) and support them.
 
 
 The Global Information Security Director is heading the department and responsible for the Global Information Security Strategy and orchestrating all security activities within this department and relevant stakeholders. He is part of the Global D&amp;T Executive Leadership Team.
 
 
 The
 
 Cyber Security Officer (CSO)
 
 is responsible for the management and implementation of the global Cyber Security Strategy based on the NIST Cyber Security Framework, to reduce the risk of a Cybersecurity incident according to the risk appetite of HEINEKEN and the Global Function, as well as to raise wider Global Function Cybersecurity awareness.
 
 
 
 Key responsibilities:
 
 
 
 <ul>
 <li>
 Security Operations
 </li>
 <li>
 Implement global security strategies to maintain the continuity of systems and update these based on local threats.
 </li>
 </ul>
 <ul>
 <li>
 </li>
 <ul>
 <li>
 Responsible to manage updates related to Global Function Security Standards that are required due to local legislative requirements, in consultation with the Global Information Security Specialist in line with HEINEKEN Security Strategy and supporting the HEINEKEN Business Strategy.
 </li>
 <li>
 Responsible for Global Function security approvals regarding global services (e.g. HeiNet), in order to maintain the highest level of security for the information and IT assets of the company.
 </li>
 <li>
 Assist the Global Information Security department in the design of controls/ standards and procedures that have broad implications, requiring systems integration of one or more technical platforms.
 </li>
 <li>
 Perform Risk reviews using the risk management procedure for all new Global Function programs/services to be deployed in the Global Function operational environment and veto programs which do not comply with HEINEKEN&rsquo;s security standards.
 </li>
 <li>
 Monitor internal and external information security and cyber security policy compliance, review and assess information security audits.
 </li>
 </ul>
 </ul>
 
 
 <ul>
 <li>
 </li>
 <ul>
 <li>
 Performs, as per the prescribed frequency the Information Security Maturity Assessment (ISMA), and ensures that all related evidence is available in support of the assessment.
 </li>
 <li>
 Monitor and ensure the timely closure of tasks related to audit and internal control issues raised by e.g. Global Audit, External Audit, etc.
 </li>
 <li>
 Develops and manages the Information Security action plan to address identified risks and non-compliances.
 </li>
 </ul>
 </ul>
 
 
 <ul>
 <li>
 </li>
 <ul>
 <li>
 Gains approval from the relevant management team on that action plan and its related budget.
 </li>
 <li>
 Monitors and reports on the execution of that actions plan, reporting to the Global D&amp;T Function management team and centrally to the Global Information Security Team.
 </li>
 <li>
 Analyse and challenge derogation requests regarding the ISP/TSP that Global Functions could have with a new solution or program, and communicate to the Global Information Security Team and Design Authority for approval in order to protect the HEINEKEN security environment.
 </li>
 <li>
 Drive resolution of cyber security incident responses and address security vulnerabilities.
 </li>
 </ul>
 </ul>
 
 
 <ul>
 <li>
 </li>
 <ul>
 <li>
 Perform/guide/drive digital investigations upon the request of Global Function/HR or Legal teams in case of breaches of HEINEKEN&rsquo;s Code of Business Conduct.
 </li>
 <li>
 If the Global Function faces any critical IT security incidents or breakout, he/she is responsible as the Global Function security incident lead to resolve in consultation with the Cyber Defense Operations Team (CDO), Global Function D&amp;T Directors and Global Function Line Managers.
 </li>
 </ul>
 </ul>
 
 
 <li>
 </li>
 <ul>
 <li>
 Identify and perform independent analysis to resolve complex first-time issues including the analysis of technical and economic feasibility of proposed security systems/ solutions. He/she is also responsible to assist the Global Information Security department for any IT technical audit (e.g. Ethical Hack) to any Global Function IT infrastructure or service that a 3rd Party offers to HEINEKEN with a valid and open contract to ensure that security policies are in place.
 </li>
 <li>
 Advises Global Function teams for security requirements (e.g. Patching, Anti-Virus, Vulnerability Management, etc).
 </li>
 <li>
 Security Awareness
 </li>
 <li>
 Drive training campaigns on cyber security awareness according to the global security awareness program and based on the Global Function reality.
 </li>
 <li>
 Security Strategy
 </li>
 <li>
 Responsible for identifying potential risks and recommendations on how to prevent and/or avoid that risk within the Global Function.
 </li>
 <li>
 Collaborate with the Global Information Security Specialist to understand and develop further the controls and processes required to improve information security.
 </li>
 <li>
 Innovation
 </li>
 <li>
 Accelerates and Drives implementation of new Security strategies and standards from global D&amp;T towards the HEINEKEN Global Functions
 </li>
 <li>
 Provide security expertise across multiple technical platforms to various Global Function stakeholders in all phases of solutions development (Ideation, Design, build, test and deploy) and Operations.
 
 
 </li>
 </ul>
 Budget responsibilities :
 
 
 Assigned to Global Function D&amp;T Manager.
 
 
 Number of direct reports:
 
 
 None
 
 
 <ul>
 <li>
 Position profile
 
 
 </li>
 </ul>
 Qualifications:
 
 
 Bachelor or Master degree in business information technology or a related field
 
 
 Possesses relevant certifications, e.g. CISSP / CCSP / CISM / CISA / CRISC
 
 
 Experience / skills required:
 
 
 <ul>
 <li>
 5+ years of working in the cyber security field and previous experience working as a cyber-security officer or manager.
 </li>
 <li>
 French is a must and preferable.
 </li>
 <li>
 Has worked with relevant market standards such as NIST, ISO 27001, COBIT and relevant laws and regulations such as privacy laws.
 </li>
 <li>
 Experience in handling security incidents.
 </li>
 <li>
 Proven ability to dynamically assess risks, threats &amp; threat actors.
 </li>
 <li>
 Able to work in a cross functional environment; preferably a background in the FMCG industry.
 </li>
 <li>
 Sense of Business Urgency and safe-cautious mind to close critical gaps and reduce any security breach.
 </li>
 <li>
 Ability to explain complex technical processes to business stakeholders.
 </li>
 <li>
 Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change.
 </li>
 <li>
 Ability to work and team with a multitude of different people and different cultures (as appropriate).
 </li>
 <li>
 Display professionalism, customer service attitude, attention to detail and quality.
 </li>
 <li>
 Possess strong interpersonal skills, relationship management and negotiation skills, strong verbal, and written communication skills.
 </li>
 <li>
 Develop self and others through continuous learning, sharing best practices, knowledge, and expertise.
 </li>
 <li>
 Excellent management and leadership skills.
 
 
 </li>
 </ul>
 Language(s):
 
 
 <ul>
 <li>
 Fluent English
 </li>
 </ul>
</div>

Cyber Security Officer - AME

Baylor College of Medicine

Job Description
 
Job Title: Manager, IT Infrastructure and Systems (Security)
 Division: Information Technology
 Work Arrangement: Hybrid
 Location: Houston, TX
 Salary Range: $111,118 - $130,728
 FLSA Status: Exempt
 Work Schedule: Monday – Friday, 8 a.m. – 5 p.m.
 
Summary
 
We are seeking an experienced Manager of IT Infrastructure and Systems to lead the integration of complex Texas Heart Institute (THI) infrastructure and cybersecurity programs into existing Baylor College of Medicine (BCM) operations. This role will partner closely with THI stakeholders to assess technical requirements, ensure continuity of services, and guide the migration and consolidation of applications, servers, networks, telephony, and related systems into BCM’s environment.
 
Job Duties
 On behalf of two IT "Phase 2" projects, works with THI stakeholders to ensure all interests are accounted for and attended to as all user technologies and supporting systems/infrastructure are migrated to BCM technologies/systems. This may require working with 15+ BCM / THI technologists, professional services firm, Legacy THI stakeholders as well as Common Spirit (provides support to some existing THI technologies).
 Oversees the transition of all clinical and research security controls into BCM’s cybersecurity framework, ensuring full alignment with institutional standards.
 Identifies and prioritizes risks, develops and harmonizes GRC controls, and advances SecOps practices in coordination with BCM’s Managed Security Services team.
 Understands how tech is implemented and used and ensures proper controls are established to ensure continued regulatory compliance when fully migrated to BCM operations.
 As systems migrate, orchestrates handling of security controls with BCM Managed Security Service Provider (MSSP) which monitors all BCM systems for threats/attacks which are detected.
 Performs other job-related duties as assigned.
 Minimum Qualifications
 Bachelor's degree in a related field. Four years of relevant experience may substitute for degree requirement.
 Four years of relevant experience.
 Preferred Qualifications and Skills
 GIAC Security Essentials (GSEC), CISM — ISACA Certified Information Security Manager, CISSP — (ISC)²
 Experience in IT architecture, controls authoring/auditing, vulnerability management, red/blue teaming.
 Experience working across matrixed teams.
 Familiarity with formal project management structures.
 Familiarity with regulatory standards HIPAA, FERPA, GLBA, and GDPR.
 Additionally, advanced Excel and/or basic Power BI skills.
 
Work Authorization Requirement: 
This position is not eligible for visa sponsorship. Candidates must be legally authorized to work in the United States at the time of application and throughout the duration of employment.
 
Baylor College of Medicine is an Equal Opportunity/Affirmative Action/Equal Access Employer.
 
Requisition ID: 24633

Manager, IT Infrastructure and Systems (Security)

Dollar Bank

<div>The AVP, Information Security Governance, leads the Bank&rsquo;s security governance team in identifying security requirements to mitigate internal and external risk. This role oversees the creation of policies, standards, and governance in support of the Information Security Program. Additionally, the role manages the enterprise security risk intake, security risk assessments, security-based compliance, third-party security review, and security awareness across the enterprise. 
The AVP of Information Security Governance partners with Cyber Security and IT to ensure technology aligns with security standards and risk is managed appropriately, providing independent oversight. This position will chair and/or represent ISG in multiple governance committees, contributes to setting security standards across technology and business processes and advises on activities necessary to assess and protect the confidentiality, integrity, and availability of Bank information and systems.
 
 
Education and Experience Requirements: 
<ul><li>Bachelor&rsquo;s degree in any field combined with 2 or more years of on-the-job experience with information technology or security.
</li><li>A minimum of 5 years of experience in any one of the following roles: IT Audit, Information Technology or Security Risk, Cyber Security, or Information Security.</li><li>A minimum of 2 years of leading in IT or Security risk, audit, compliance, or governance.</li><li>Leadership experience</li></ul> 
Certificate, Licenses and Registration Requirements:
 
<ul><li>Preferred but not required certifications include but are not limited to:</li></ul>
o Certified in Risk and Information Systems Control (CRISC) 
o Certified Information Systems Auditor (CISA) 
o Certified Information Security Manager (CISM) 
o Certified Information Systems Security Professional (CISSP) 
 
Knowledge, Skill, and Ability Requirements: 
<ul><li>Strong knowledge of privacy, information security standards and best practices.</li><li>Experience implementing and providing oversight for information security standards in a complex business environment.</li><li>Experience with risk assessment processes and practices.</li><li>Able to build and maintain strong relationships across the organization, including multiple business units and senior leadership.</li><li>Proven project management skills.</li><li>Proven ability to think strategically about business, risk, and technical challenges impacting IT security.</li><li>Excellent communication skills with all levels of management and outside vendors, technical and non-technical users.
</li><li>Must have excellent research, analytical, and documentation skills.</li><li>Ability to work independently and within a team.</li></ul> 
Essential Functions: 
<ul><li>Perform duties in three lines of defense model.</li><li>Advise on security architecture in line with FFIEC guidance, framework alignment (NIST, CIS), and security best practices.</li><li>Oversee security specific tooling configurations.</li><li>Participate in determining security requirements for new products and services.
</li><li>Lead a team of information security professionals.</li><li>Help ensure IT compliance with technical portions of applicable regulations and guidelines.</li><li>Perform risk assessments and attestations of controls to author executive level reports and memorandums of the outcomes.</li><li>Perform due diligence security reviews on the Bank&rsquo;s existing and proposed new third-party vendors.</li><li>Maintain, track, and report to senior leadership a register of information security related identified control gaps and their associated risks through remediation.</li><li>Participate in and assist with facilitating tabletop exercises.</li><li>Document Information Security Standards.</li><li>Contract reviews for new or modified external vendor services.</li><li>Monitoring of cyber health of third parties who house Bank information.</li><li>Oversee the Bank&rsquo;s Security Awareness program.</li><li>Advise on security architecture for networking, infrastructure, applications and cloud environments.
</li><li>Assist with governance for vulnerability assessments, penetration testing, and risk assessments.
</li><li>Provide collaboration throughout the Bank in data security matters to ensure compliance with all established data security policies and procedures.</li><li>Assist with the evaluation and recommendation of new Information Security systems.</li><li>Review current processes and procedures for technical portions of IT compliance, recommend improvements for higher maturity.</li><li>Research and evaluate proposed security capability solutions for adherence to documented Bank standards, policies, guidelines, and technical portions of regulatory requirements.</li><li>Perform gap analyses.</li><li>Participate in various projects to advise on Information Security requirements and governance.</li><li>Make security decisions in a crisis on behalf of the CISO if the CISO is not available.</li></ul> 
All employees have the responsibility and the accountability to serve as risk managers for their businesses by understanding, reporting, responding to, managing and monitoring the risk they encounter daily as required by Dollar Bank&rsquo;s risk management program. Compliance with regulatory laws and company procedures is a required component of all position descriptions. 
 
Supervisory Responsibilities:
 
<ul><li>Achieves results by motivating and stimulating team members; promotes commitment to common goals by communicating team vision and mission.</li><li>Works with employees to identify development opportunities and create career development plans.</li><li>Coaches and mentors employees on their strengths and areas for improvement, providing constructive feedback.</li><li>When needed, selects talented individuals from inside and outside of the Bank, hiring individuals whose capabilities match the needs of the organization in a timely and prudent manner.</li></ul></div>

AVP, Information Security Governance (Hybrid)

Deloitte

<div>Are you an experienced cybersecurity professional looking to help organizations reduce cyber risk and improve resilience? At Deloitte &amp; Touche LLP, you'll work with leading organizations to strengthen security, enable innovation, and reduce threat exposure. Join Deloitte's Cyber Defense &amp; Resilience Continuous Threat Exposure Management (CTEM) team to help clients identify, assess, and reduce their attack surface. In this role, you'll lead remediation efforts, work with cross-functional stakeholders, and deliver solutions aligned to business and security priorities. 
 
Recruiting for this role ends on 12/31/2026. 
 
Work you'll do 
 
As an Engineering Manager II on the Cyber Defense &amp; Resilience Continuous Threat Exposure Management (CTEM) team, you will be responsible for... 
<ul><li>
Managing exposure-based remediation and patching activities aligned to CTEM priorities</li><li>
Leading vulnerability and patch management operations across infrastructure, middleware, and applications</li><li>
Prioritizing remediation activities using threat intelligence, exploitability, attack paths, asset criticality, and exposure data</li><li>
Supporting exception management, incident-driven response activities, and process improvements that reduce cyber risk</li><li>
Developing client deliverables, contributing to proposals and points of view, and mentoring junior practitioners</li></ul> 
A successful candidate would possess these skills: 
<ul><li>
Ability to work independently and collaborate as part of a team</li><li>
Effective written and verbal communication skills</li><li>
Meticulous attention to detail and quality of work product</li><li>
Ability to build and sustain professional relationships</li><li>
Ability to lead projects or workstreams</li><li>
Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment</li><li>
Strong interpersonal skills and professional demeanor</li><li>
Ability to meet deadlines</li><li>
Ability to mentor and provide clear guidance to others</li></ul> 

The team 
 
Deloitte's Cyber Specialists help organizations manage cyber risk through stronger security, greater visibility, and embedded privacy practices. The Cyber Defense &amp; Resilience team works with clients to design, implement, and operate programs that help protect critical assets, support digital transformation, and respond to evolving threats. Within this practice, the CTEM team helps clients identify exposures, prioritize remediation, and reduce risk across complex technology environments. 
 
Qualifications 
 
Required: 
<ul><li>
10+ years of experience in information technology, information security, or both</li><li>
Experience leading vulnerability management, patch management, or continuous threat exposure management remediation programs</li><li>
Experience remediating vulnerabilities across Linux, Windows, middleware, and applications using tools such as BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, Windows Server Update Services, Tenable, Rapid7, or Qualys</li><li>
Experience automating remediation workflows using PowerShell, Bash, Python, JavaScript Object Notation, Ansible, Terraform, or a combination of these</li><li>
Experience using Information Technology Service Management or configuration management database platforms such as ServiceNow to coordinate remediation and report exposure reduction</li><li>
Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.</li><li>
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.</li></ul> 
Preferred: 
<ul><li>
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, or a related field</li><li>
Experience in a consulting environment or with a Big 4 firm</li><li>
Experience with ServiceNow workflows, automation, or orchestration</li><li>
Experience with frameworks such as the National Institute of Standards and Technology Cybersecurity Framework, Center for Internet Security, International Organization for Standardization 27001, or Cloud Security Alliance Cloud Controls Matrix</li><li>
Experience supporting proposals, statements of work, or work orders</li></ul> 
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100. 
 
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. 
 
#CyberCDR27</div>

Cyber Manager - ASM Vulnerability Management - Patching

Search 10000+ Information security manager jobs near you this August. New roles added regularly across leading industries. Apply today.