it security manager

Department of Administrative Services

<div><div>Initial Posting Date:</div>
03/19/2026<div></div><div>
Application Deadline:</div>
04/05/2026<div></div><div>
Agency:</div>
Department of Administrative Services<div></div><div>
Salary Range:</div>
$8,717 - $13,477<div></div><div>
Position Type:</div>
Employee<div></div><div>
Position Title:</div>
SOC Manager (IT Cyber Security Manager 2)<div></div><div>
Job Description:</div><div>
Now Hiring, Apply Today! SOC Manager (IT Cyber Security Manager 2)</div><div><div>
Enterprise Information Services</div> (EIS) is a state government-wide information technology (IT) organization led by Oregon&rsquo;s State Chief Information Officer (CIO). The <div>Cyber Security Services</div> (&ldquo;CSS&rdquo;) is an information security management section within EIS. CSS&rsquo;s mission: Leading Oregon Government to safeguard the State&rsquo;s information resources. CSS is comprised of the following units: Governance Risk and Compliance, Enterprise Security Architecture, Network Security, and Security Operations Center (SOC).</div><div></div><div>
What You&rsquo;ll Do</div><div>
As the SOC Manager, you will be at the center of Oregon&rsquo;s cyber defense, the heartbeat of the enterprise, leading the day-to-day operations of the State of Oregon&rsquo;s Security Operations Center and ensuring continuous monitoring, detection, analysis, and response to threats that impact enterprise (State of Oregon) systems and critical public services. You will guide and grow an extremely talented team of SOC analysts, maintain 24x7 readiness, and make sure the tools, workflows, playbooks, and escalation paths are not just documented, but tested and battle-ready. You will turn strategy into action, translate the SOC Director&rsquo;s vision and enterprise direction into operational excellence, and lead the charge during high-impact incidents where clear thinking, calm leadership, and teamwork matter most. Working side-by-side with Network, Endpoint, Cloud, Vulnerability, and agency partners across the state, you will help coordinate response, protect Oregonians&rsquo; data, and continuously strengthen our security posture. This is a role for a leader who thrives in fast-moving environments, loves developing people, and wants to make a real, visible impact&mdash;every day&mdash;on the security and resilience of the State of Oregon.</div><div></div><div>
For a full review of the position duties, details, and working conditions, please click <div>here.</div></div><div></div><div>
This Is What You Need to Qualify</div><ul><li><div>
Six years of supervision, management, or progressively related experience*; OR</div></li><li><div>
Three years of related* experience and a bachelor's degree in a related* field.</div></li></ul><div></div><ul><li>Related qualifying information systems experience in: Microsoft Defender for Endpoint, Identity, Office 365, and Cloud Apps, Attack surface reduction (ASR), device timeline, evidence &amp; response actions, Live response sessions and EDR forensics; Qualifying Bachelor degree in Information Technology, Computer Science, or closely related field.</li></ul><div></div><div>
The ideal candidate will possess the following desired skills and attributes:</div><ul><li><div>
A strong foundation in cybersecurity operations, with the ability to understand, oversee, and guide threat detection, incident response, vulnerability management, and security monitoring across on-premises, cloud, and hybrid environments.</div></li><li><div>
Operational fluency with modern SOC technologies and workflows, including SIEM, EDR/XDR, log management, alerting, case management, and investigation platforms, with the ability to ask the right questions, challenge assumptions, and make informed decisions when not hands-on in the tools.</div></li><li><div>
The mindset of a cyber operations leader, able to direct investigations, validate analyst conclusions, prioritize response actions, and ensure incidents are managed effectively from triage through recovery.</div></li><li><div>
A deep understanding of how enterprise identity, endpoints, networks, cloud services, and security controls interconnect, and how attackers move across them, utilizing the MITRE Att&amp;ck Methods.</div></li><li><div>
Proven ability to build, mentor, and sustain high-performing SOC teams, fostering trust, accountability, resilience, and calm leadership in high-pressure, 24x7 environments.</div></li><li><div>
The judgment to balance risk, impact, and operational tempo, ensuring the right resources are focused on the most critical threats and that staff are supported and not burned out.</div></li><li><div>
The ability to evaluate and improve SOC processes, playbooks, tooling, and staffing models, turning gaps and lessons learned into practical operational improvements.</div></li><li><div>
Strong communication and leadership presence, with the ability to translate technical realities into clear guidance for executives, agency partners, and incident commanders.</div></li><li><div>
Experience coordinating complex incident response efforts across multiple teams, agencies, and external partners, bringing clarity, structure, and confidence during major events.</div></li><li><div>
Extensive experience (typically 7+ years in cybersecurity, including leadership or senior operational roles within a SOC, IR, or security operations environment).</div></li><li><div>
Familiarity with security frameworks and best practices (NIST CSF, incident response lifecycle, MITRE ATT&amp;CK) and how to apply them at an operational and programmatic level.</div></li></ul><div></div><div>
Preference Statement</div><div>
Preference will be given to candidates with one or more of the following certifications: CISSP: (Certified Information Systems Security Professional), SC-200: Microsoft Security Operations Analyst, SC-100: Cybersecurity Architect, AZ-500: Azure Security Engineer, CompTIA CySA+ or Security+ , GIAC (GCIA, GCIH, GMON) for advanced threat hunting.</div><div></div><div>
How to Apply</div><ul><li><div>
Click on the &quot;Apply&quot; link above to complete your online application and submit by the posted closing date and time. For step-by-step instructions click <div>apply to work for the state</div> or <div>current state employee.</div></div></li><li><div>
Required Documents: cover letter and resume</div></li><li><div>
The work experience and/or education section of your application must clearly demonstrate how you meet all the minimum qualifications and desired skills and attributes listed above. Your cover letter should address your skills supporting an enterprise level environment. <i>Failing to attach required documents may result in disqualification of your application.</i></div></li><li><div>
The State of Oregon does not request or require your age, date of birth, attendance or graduation dates from an educational institution during the application process.</div></li></ul><ul><li><div>
Be sure to check Workday and your email for additional tasks and updates. After hitting submit there may be additional required tasks for you to complete prior to the announcement closing. Please save a copy of this job announcement for reference, as it is not available for you to view after the announcement deadline.</div></li></ul><ul><li><div>
If you are requesting Veteran&rsquo;s Preference, you will receive a Workday task to submit your supporting documents. Be sure to submit your documentation prior to the close date of this posting in order to have the preference considered. Click on the following link for additional information on <div>Veterans&rsquo; Preference</div>.</div></li></ul><div></div><div>
Benefits of Joining Our Team</div><div>
The Department of Administrative Services (DAS) Team strives to create an environment that is supportive and encourages work-life balance and innovation. The EIS team is built on collaboration and support. We work together to ensure our customer agencies receive the highest quality of service. We take pride in our work and look for ways to innovate. EIS is committed to hiring highly skilled, diverse and dedicated employees who will bring a unique skill set to the team.</div><div>
Our amazing <div>benefits</div> include:</div><ul><li><div>
Comprehensive Health Coverage: Low-cost medical, vision, and dental plans for you and your family. Additional benefits include life insurance, short- and long-term disability, deferred compensation savings plans, and flexible spending accounts for health and childcare. Optional benefits including life insurance, disability, FSA, and more</div></li><li><div>
Generous Paid Time Off: 11 holidays, 3 personal business days, monthly sick leave and vacation leave that increases with years of service.</div></li><li><div>
Career Development: Opportunities for professional growth and advancement.</div></li><li><div><div>
Get There</div><ul><li>Oregon&rsquo;s easy-to-use carpool matching tool and trip planner.</li></ul></div></li><li><div><div>
Public Service Loan Forgiveness</div>: You may qualify for the PSLF program.</div></li><li><div>
Hybrid Work Opportunity: This position supports a hybrid work schedule. You can expect to work in the office 1 day per week, with work arrangements periodically reviewed to ensure business needs are met.</div></li></ul><div></div><div>
Additional Details</div><ul><li><div>
This announcement is for one, full-time, permanent, Management Service- Supervisory, SOC Manager (IT Cyber Security Manager 2) position and may be used to fill future vacancies.</div></li><li><div>
The salary listed is the non-PERS qualifying salary range. If the successful candidate is PERS qualifying, the salary range will reflect an additional 6.95%.</div></li><li><div>
Review the <div>Classification and Compensation</div> page for more details on the classification, or you may visit our website for information on the job offer process following <div>pay equity</div>.</div></li><li><div>
Applicants must be authorized to work in the United States. Applicants who require VISA sponsorship will not be considered at this time.</div></li><li><div>
Employee will be required to possess and maintain a valid driver&rsquo;s license issued by the state where the employee resides or provide an acceptable alternate form of transportation.</div></li><li><div>
Employee is required to obtain and maintain CJIS clearance.</div></li><li><div>
Finalists will be subject to a computerized criminal history check. Adverse background data may be grounds for immediate disqualification.</div></li><li><div>
If you need an application in an alternate format in order to complete the process or for accommodation requests under the Americans with Disabilities Act (ADA), you may contact the Recruiter, Nancy Karnas at: nancy.karnas@das.oregon.gov | 971-719-3083.</div></li></ul><div></div><div>
Helpful Links &amp; Resources</div><div><div>
How to Set Job Alerts</div> | <div>Workday Applicant FAQ</div> | <div>What You Need to Know to Get the Job</div></div><div><div>
Oregon Job Opportunities Webpage</div> | <div>Classification and Compensation</div> | <div>Pay Equity</div></div><div></div><div><i>
Come for a job. | Stay for a career. | Make a difference... for a lifetime!</i></div><div></div><div><i>
The Department of Administrative Services is an Equal Opportunity, Affirmative Action Employer Committed to Workforce Diversity. At the Department of Administrative Services, we embody the value of hiring a workforce representative of the communities we serve, understanding that a diverse workforce revitalizes our state. We value diversity and foster a positive and welcoming environment where all employees can thrive.</i></div></div><div></div>

SOC Manager (IT Cyber Security Manager 2)

Hilton

<div><p>Security Manager</p><p>
A Security Manager directs security personal to deliver a safe Guest and Member experience while coordinating with government and law enforcement and ensuring compliance with local safety legislation and emergency procedures.<br>
</p><br>
<br>
<b>What will I be doing?</b><p><br>
As a Security Manager, you are responsible for directing and coordinating the activities of security personnel, coordinating with government and law enforcement agencies, and organising patrolling of the property to deliver a safe Guest and Member experience. A Security Manager will also be required to liaise with the Hilton Safety/Security director on important matters and ensure that hotel is in compliance with all local safety regulations and emergency procedures. Specifically, you will be responsible for performing the following tasks to the highest standards:</p><ul>
<li>Maintain good communication and work relationships in all areas of the hotel</li>
<li>Coordinate with government and law enforcement agencies as necessary</li>
<li>Coordinate additional personnel for Conference and Banqueting functions</li>
<li>Organise patrolling of all boundary areas, bedrooms, offices, storage areas, public areas, and function rooms</li>
<li>Assist the hotel in complying with Local Fire Safety Legislation</li>
<li>Assist the hotel with Local Safety Legislation being specifically responsible for compliance of the security department</li>
<li>Ensure tours are carried out for the purpose of fire prevention, safe means of escape, and security</li>
<li>Inquire as necessary into and report upon any thefts within the hotel using your discretion in connection with any of these matters that you deem should be reported to the police</li>
<li>Liaise with the Hilton Safety/Security director on the implementation of Company Policies, guides, and matters of mutual interest</li>
<li>Direct and coordinate the activities of all security personnel, engage in the implementation of safety and security procedures for the department, and provide assistance and advice to other departments in relation to security</li>
<li>Prepare incident reports</li>
<li>Liaise with Departmental Heads to ensure hotel staff is aware of their security responsibilities</li>
<li>Plan, deliver and facilitate regular staff awareness training</li>
<li>Be fully conversant of company terrorist procedures and convey to staff</li>
<li>Be fully conversant with hotel Fire and Emergency procedures</li>
<li>Responsible for management of key control within all departments</li></ul><b>
What are we looking for?</b><p><br>
A Security Manager serving Hilton brands is always working on behalf of our Guests and working with other Team Members. To successfully fill this role, you should maintain the attitude, behaviours, skills, and values that follow:</p><ul>
<li>Organised and systematic approach to problem solving</li>
<li>Security industry experience in managerial capacity</li>
<li>Ability to listen and respond to demanding guest needs</li>
<li>Excellent leadership, interpersonal and communication skills</li>
<li>Accountable and resilient</li>
<li>Committed to delivering high levels of customer service</li>
<li>Ability to work under pressure</li>
<li>Flexibility to respond to a range of different work situations</li>
<li>Good grooming standards</li></ul>
<p>It would be advantageous in this position for you to demonstrate the following capabilities and distinctions:</p><ul>
<li>Previous experience in same or similar role</li>
<li>First Aid</li>
<li>Fire fighting qualification</li>
<li>IT proficiency</li>
<li>Fire combat training</li></ul><br>
<b>
What will it be like to work for Hilton?</b><br>
<p>Hilton is the leading global hospitality company, spanning the lodging sector from luxurious full-service hotels and resorts to extended-stay suites and mid-priced hotels. For nearly a century, Hilton has offered business and leisure travelers the finest in accommodations, service, amenities and value. Hilton is dedicated to continuing its tradition of providing exceptional guest experiences across its global brands. Our vision &ldquo;to fill the earth with the light and warmth of hospitality&rdquo; unites us as a team to create remarkable hospitality experiences around the world every day. And, our amazing Team Members are at the heart of it all!</p></div>

Security Manager

<div>
 A Security Manager directs security personal to deliver a safe Guest and Member experience while coordinating with government and law enforcement and ensuring compliance with local safety legislation and emergency procedures.
 <br/>
 <br/>
 <strong>
  What will I be doing?
  <br/>
  <br/>
 </strong>
 As a Security Manager, you are responsible for directing and coordinating the activities of security personnel, coordinating with government and law enforcement agencies, and organising patrolling of the property to deliver a safe Guest and Member experience. A Security Manager will also be required to liaise with the Hilton Safety/Security director on important matters and ensure that hotel is in compliance with all local safety regulations and emergency procedures. Specifically, you will be responsible for performing the following tasks to the highest standards:
 <br/>
 <br/>
 <ul>
  <li>
   Maintain good communication and work relationships in all areas of the hotel
  </li>
  <li>
   Coordinate with government and law enforcement agencies as necessary
  </li>
  <li>
   Coordinate additional personnel for Conference and Banqueting functions
  </li>
  <li>
   Organise patrolling of all boundary areas, bedrooms, offices, storage areas, public areas, and function rooms
  </li>
  <li>
   Assist the hotel in complying with Local Fire Safety Legislation
  </li>
  <li>
   Assist the hotel with Local Safety Legislation being specifically responsible for compliance of the security department
  </li>
  <li>
   Ensure tours are carried out for the purpose of fire prevention, safe means of escape, and security
  </li>
  <li>
   Inquire as necessary into and report upon any thefts within the hotel using your discretion in connection with any of these matters that you deem should be reported to the police
  </li>
  <li>
   Liaise with the Hilton Safety/Security director on the implementation of Company Policies, guides, and matters of mutual interest
  </li>
  <li>
   Direct and coordinate the activities of all security personnel, engage in the implementation of safety and security procedures for the department, and provide assistance and advice to other departments in relation to security
  </li>
  <li>
   Prepare incident reports
  </li>
  <li>
   Liaise with Departmental Heads to ensure hotel staff is aware of their security responsibilities
  </li>
  <li>
   Plan, deliver and facilitate regular staff awareness training
  </li>
  <li>
   Be fully conversant of company terrorist procedures and convey to staff
  </li>
  <li>
   Be fully conversant with hotel Fire and Emergency procedures
  </li>
  <li>
   Responsible for management of key control within all departments
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What are we looking for?
  <br/>
  <br/>
 </strong>
 A Security Manager serving Hilton brands is always working on behalf of our Guests and working with other Team Members. To successfully fill this role, you should maintain the attitude, behaviours, skills, and values that follow:
 <br/>
 <br/>
 <ul>
  <li>
   Organised and systematic approach to problem solving
  </li>
  <li>
   Security industry experience in managerial capacity
  </li>
  <li>
   Ability to listen and respond to demanding guest needs
  </li>
  <li>
   Excellent leadership, interpersonal and communication skills
  </li>
  <li>
   Accountable and resilient
  </li>
  <li>
   Committed to delivering high levels of customer service
  </li>
  <li>
   Ability to work under pressure
  </li>
  <li>
   Flexibility to respond to a range of different work situations
  </li>
  <li>
   Good grooming standards
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 It would be advantageous in this position for you to demonstrate the following capabilities and distinctions:
 <br/>
 <br/>
 <ul>
  <li>
   Previous experience in same or similar role
  </li>
  <li>
   First Aid
  </li>
  <li>
   Fire fighting qualification
  </li>
  <li>
   IT proficiency
  </li>
  <li>
   Fire combat training
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What will it be like to work for Hilton?
  <br/>
  <br/>
 </strong>
 Hilton is the leading global hospitality company, spanning the lodging sector from luxurious full-service hotels and resorts to extended-stay suites and mid-priced hotels. For nearly a century, Hilton has offered business and leisure travelers the finest in accommodations, service, amenities and value. Hilton is dedicated to continuing its tradition of providing exceptional guest experiences across its global brands. Our vision &ldquo;to fill the earth with the light and warmth of hospitality&rdquo; unites us as a team to create remarkable hospitality experiences around the world every day. And, our amazing Team Members are at the heart of it all!
 <br/>
 <br/>
 <strong>
  Work Locations
  <br/>
  <br/>
 </strong>
 Hilton Kuwait Resort
 <br/>
 <br/>
 <strong>
  Schedule
  <br/>
  <br/>
 </strong>
 Full-time
 <br/>
 <br/>
 <strong>
  Brand
  <br/>
  <br/>
 </strong>
 Hilton Hotels &amp; Resorts
 <br/>
 <br/>
 <strong>
  Job
  <br/>
  <br/>
 </strong>
 Security and Loss Prevention
</div>


ESP Legal

<div>
 <p>
  IT Security Manager
 </p>
 <p>
  Position Summary
 </p>
 <ul>
  <li>
   The IT Security Manager plays a critical leadership role in shaping and executing the firm&rsquo;s cybersecurity strategy. Reporting to the Chief Information Officer (CIO), this individual leads the firm&rsquo;s Information Security team and works closely with partners, firm leadership, and IT teams to maintain and strengthen the firm&rsquo;s security posture.
  </li>
  <li>
   This role requires both strategic vision and hands-on leadership. The IT Security Manager will oversee daily security operations, guide long-term security initiatives, and serve as a trusted advisor to leadership on all matters related to information security, risk management, and regulatory compliance.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Scope &amp; Leadership
 </p>
 <ul>
  <li>
   The IT Security Manager serves as the operational leader of the firm&rsquo;s information security program and partners closely with the CIO to advance cybersecurity strategy. Key leadership responsibilities include:
  </li>
  <li>
   Directing the day-to-day operations of the firm&rsquo;s information security program
  </li>
  <li>
   Managing and mentoring the Information Security team while fostering a culture of continuous improvement
  </li>
  <li>
   Leading implementation and oversight of security technologies, policies, and controls
  </li>
  <li>
   Partnering with infrastructure, cloud, and application teams to embed security across all systems and services
  </li>
  <li>
   Representing the firm&rsquo;s security program in discussions with leadership, partners, clients, and external auditors
  </li>
  <li>
   Supporting the development of the firm&rsquo;s long-term cybersecurity roadmap and strategic initiatives
  </li>
  <li>
   Maintaining and evolving governance, risk management, and security operations frameworks
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Key Responsibilities
 </p>
 <ul>
  <li>
   Security Operations &amp; Risk Management
  </li>
  <li>
   Oversee the deployment, configuration, and optimization of security platforms, including MDR, EDR, MFA, IAM, DLP, vulnerability management, and email security tools
  </li>
  <li>
   Monitor the firm&rsquo;s security landscape to identify vulnerabilities and proactively mitigate risk
  </li>
  <li>
   Lead security incident response activities, coordinating with internal teams and external partners to ensure rapid resolution and recovery
  </li>
  <li>
   Conduct security assessments, penetration testing exercises, and tabletop simulations to strengthen incident readiness
  </li>
  <li>
   Evaluate emerging threats and implement strategies to protect firm systems and data
  </li>
  <li>
   Security Governance &amp; Compliance
  </li>
  <li>
   Develop, maintain, and enforce security policies, standards, and procedures
  </li>
  <li>
   Ensure compliance with applicable regulatory requirements and industry frameworks including ISO 27001, GDPR, CCPA, and client security guidelines
  </li>
  <li>
   Manage the firm&rsquo;s client security program, including security questionnaires, audits, and outside counsel guidelines
  </li>
  <li>
   Oversee vulnerability management and risk remediation initiatives across the organization
  </li>
  <li>
   Team Leadership &amp; Development
  </li>
  <li>
   Lead, mentor, and develop a team of information security professionals
  </li>
  <li>
   Recruit, develop, and retain top security talent
  </li>
  <li>
   Ensure the team maintains current knowledge of security tools, threats, and best practices
  </li>
  <li>
   Promote collaboration across IT and business teams to maintain a strong security culture
  </li>
  <li>
   Security Awareness &amp; Communication
  </li>
  <li>
   Manage the firm&rsquo;s security awareness and training programs
  </li>
  <li>
   Communicate security risks, initiatives, and program status to firm leadership and partners
  </li>
  <li>
   Serve as a liaison between the security team and other departments to ensure alignment on security priorities
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Remote Work
  </strong>
  This position may be primarily or fully remote, with occasional travel or in-office presence as required. Preference will be given to candidates located within commuting distance of one of the firm's nationwide offices.
 </p>
 <p>
 </p>
</div>


Information Security Manager

Qiddiya Investment Company

<div><p>Qiddiya Investment Company is seeking a proactive and detail-oriented Manager - Vulnerability Management to lead our efforts in identifying, assessing, and prioritizing vulnerabilities within our IT infrastructure and applications. In this critical role, you will be responsible for developing and implementing a robust vulnerability management program that enhances the security posture of our organization.</p><p>
Your expertise will be vital in coordinating vulnerability assessments, managing remediation efforts, and collaborating with various teams to ensure that vulnerabilities are effectively addressed and mitigated.</p>
Key Responsibilities<ul>
<li>Develop and implement a comprehensive vulnerability management strategy, including policies, procedures, and best practices.</li>
<li>Conduct regular vulnerability assessments and penetration testing to identify weaknesses in systems, applications, and network infrastructure.</li>
<li>Prioritize identified vulnerabilities based on risk assessment and business impact, and provide actionable recommendations for remediation.</li>
<li>Collaborate with IT and development teams to ensure timely resolution of vulnerabilities and track remediation efforts.</li>
<li>Monitor and evaluate the effectiveness of existing security controls to reduce vulnerability exposure.</li>
<li>Stay current with emerging vulnerabilities and threats, providing guidance on necessary updates to the vulnerability management program.</li>
<li>Prepare reports and presentations for senior management outlining vulnerability trends, remediation status, and risk mitigation efforts.</li>
<li>Conduct training and awareness programs to foster a culture of security among staff regarding vulnerability management practices.</li><br>
</ul><br>
<br>
<b>Requirements</b><br>
<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, or a related field.</li>
<li>5+ years of experience in vulnerability management, penetration testing, or IT security roles.</li>
<li>Strong knowledge of vulnerability assessment tools and techniques, as well as common vulnerabilities and exploits.</li>
<li>Experience with risk management frameworks and security standards (e.g., NIST, ISO 27001, CIS Controls).</li>
<li>Excellent analytical and problem-solving skills.</li>
<li>Strong communication and interpersonal skills, capable of conveying technical information to non-technical stakeholders.</li>
<li>Relevant certifications (e.g., Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar) are highly desirable.</li><br>
</ul><br>
<br>
<b>Benefits</b><p><br>
Comprehensive benefits package</p></div>

Manager - Vulnerability Management

Genesee County MI

<div>
 <strong>
  Salary: $56.7288 Hourly ($117,996)
  <br/>
  <br/>
 </strong>
 <strong>
  Minimum Qualifications
  <br/>
  <br/>
 </strong>
 Ten (10) years' progressive professional IT experience
 <strong>
  -AND-
 </strong>
 five (5) years' professional experience in cybersecurity, including leadership responsibilities
 <strong>
  -AND-
 </strong>
 five (5) years' experience in enterprise risk management, security auditing and compliance oversight
 <strong>
  -AND-
 </strong>
 five (5) years' experience supervising or managing IT and/or cybersecurity staff.
 <br/>
 <br/>
 Equivalent combinations of education and experience may be considered.
 <br/>
 <br/>
 <strong>
  Desired Certifications
  <br/>
  <br/>
 </strong>
 Experience in public sector or governmental environments preferred.
 <br/>
 <br/>
 Certified Information Systems Security Professional (CISSP)
 <br/>
 <br/>
 Certified Information Security Manager (CISM)
 <br/>
 <br/>
 Certified Information Systems Auditor (CISA)
 <br/>
 <br/>
 Certified in Risk and Information Systems Control (CRISC)
 <br/>
 <br/>
 GIAC certifications
 <br/>
 <br/>
 Other relevant advanced cybersecurity certifications
 <br/>
 <br/>
 <strong>
  Special Requirements
  <br/>
  <br/>
 </strong>
 Must be willing to work irregular hours, nights and weekends in response to cybersecurity incidents.
 <br/>
 <br/>
 Must obtain and maintain certifications as determined by the CIO.
 <br/>
 <br/>
 Will be required to pass background and security clearance checks.
 <br/>
 <br/>
 <strong>
  Physical Requirements
  <br/>
  <br/>
 </strong>
 Must be able to perform Essential Job Duties and Functions with or without reasonable accommodations.
 <br/>
 <br/>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 The Chief Information Security Officer (CISO) is responsible for establishing, leading and continuously improving Genesee County's enterprise information security and risk management program. This executive leadership role provides strategic direction and governance for cybersecurity, data protection, regulatory compliance, business continuity and technology risk management across all County departments and offices.
 <br/>
 <br/>
 The CISO develops and implements a comprehensive, county-wide security strategy aligned with business objectives, legal requirements and industry best practices. The position is appointed by and reports to the Chief Information Officer and works closely with County leadership, elected officials, department heads and external partners.
 <br/>
 <br/>
 <strong>
  Essential Job Duties And Functions
  <br/>
  <br/>
 </strong>
 <strong>
  Strategic Leadership &amp; Governance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Develops and executes a comprehensive enterprise cybersecurity strategy and roadmap.
  </li>
  <li>
   Establishes a county-wide information security governance framework.
  </li>
  <li>
   Advises the CIO, County leadership and elected officials on cybersecurity risks, threats and mitigation strategies.
  </li>
  <li>
   Provides executive-level reporting on risk posture, security incidents, compliance status and emerging threats.
  </li>
  <li>
   Leads the development of long-term cybersecurity investment and budget planning.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Risk Management &amp; Compliance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Establishes and maintains a formal enterprise risk management framework for cybersecurity.
  </li>
  <li>
   Oversees security audits, risk assessments and vulnerability management programs.
  </li>
  <li>
   Ensures compliance with applicable federal, state and local regulations and standards.
  </li>
  <li>
   Develops, maintains and enforces information security policies, standards and procedures.
  </li>
  <li>
   Coordinates third-party risk management and vendor security reviews.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Security Architecture &amp; Operations
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Provides executive oversight of county IT architecture, infrastructure security and data protection strategies.
  </li>
  <li>
   Ensures security measures are integrated into system design, development, procurement and implementation processes.
  </li>
  <li>
   Oversees implementation and management of security technologies including firewalls, VPNs, endpoint protection, identity and access management and data loss prevention.
  </li>
  <li>
   Ensures appropriate security controls are embedded in new systems, networks and data center initiatives.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Incident Response &amp; Resilience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Leads the County's cybersecurity incident response program.
  </li>
  <li>
   Directs response efforts for security breaches, threats and cyber incidents.
  </li>
  <li>
   Oversees development and testing of disaster recovery and business continuity plans.
  </li>
  <li>
   Coordinates with law enforcement, regulatory bodies, insurance carriers and external cybersecurity partners as needed.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Program &amp; Operational Management
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Ensures the internal IT security framework operates effectively while supporting business needs across departments.
  </li>
  <li>
   Evaluates new initiatives and projects for security architecture alignment and risk mitigation.
  </li>
  <li>
   Leads security-related change management and stakeholder education initiatives.
  </li>
  <li>
   Establishes cybersecurity awareness and training programs for all County employees.
  </li>
  <li>
   Develops and tracks key performance indicators (KPIs) and key risk indicators (KRIs) for cybersecurity performance.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Leadership &amp; Supervision
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Builds and leads a high-performing cybersecurity team.
  </li>
  <li>
   Fosters a culture of security awareness and accountability across the organization.
  </li>
  <li>
   Works collaboratively with department leadership to balance security, usability and operational efficiency.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Please See The Attached Job Description For More Details.
  <br/>
  <br/>
 </strong>
 <strong>
  <em>
   Job Posted by ApplicantPro
  </em>
 </strong>
</div>


CHIEF INFORMATION SECURITY OFFICER (IT)

SkyePoint Decisions

<p></p><div><div><p>SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively &ndash; anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.</p></div><p>
SkyePoint Decisions is seeking a Network Security Operations Manager to support the Department of State (DoS) Diplomatic Technology (DT) Bureau. DT provides enterprise architecture design, engineering, operations and maintenance support services for desktops, servers, networks, firewalls, and enterprise applications across the Department. The Network Security Operations Manager is a senior leadership role responsible for the end-to-end governance and technical execution of network security and data protection strategies. This position bridges the gap between high-level policy and technical implementation, ensuring that cybersecurity, network security, and compliance frameworks work in harmony to protect the organization's most sensitive data.</p>
<p>
This position is on-site in Springfield, VA.</p>
<p><b>
Responsibilities:</b></p>
<ul>
<li>Infrastructure Oversight: Directing the deployment and maintenance of next generation network security solutions, ensuring secure data-in-motion across all enterprise sites.</li>
<li>Network Security Strategy: Owning the security lifecycle (generation, storage, rotation, and destruction) and managing the network security infrastructure.</li>
<li>Policy &amp; Standards Development: Writing and enforcing organizational cybersecurity and network security policies, addressing Post Quantum Encryption, algorithm selection (AES-256, RSA), and Zero Trust access controls.</li>
<li>Audit &amp; Compliance Leadership: Acting as the primary lead for security audits (CISA, NIST, FIPS 140-2/3), ensuring all cybersecurity/network security activities are logged, traceable, and legally compliant.</li>
<li>Incident Management: Leading the response to cybersecurity incidents.</li>
</ul>
<p><b>Required Qualifications:</b></p>
<ul>
<li>Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, or Mathematics.</li>
<li>Must have an active TS clearance with ability to obtain SCI.</li>
<li>Experience: 7+ years in IT security, with at least 3 years in a supervisory or management capacity focused on cryptography or network security.</li>
<li>Certifications:
<ul><li>CISSP (Security Management)</li>
<li>CISM (Certified Information Security Manager)</li>
<li>CISA (Audit focus)</li>
</ul></li><li>Network Cryptography: Deep expertise in MACsec, IPsec, and the performance impacts of encryption (MTU/MSS fragmentation) on high-speed circuits.</li>
<li>Deep knowledge of symmetric/asymmetric algorithms (AES-256, RSA, ECC) and the ability to transition architecture toward Post-Quantum Cryptography (PQC).</li>
<li>Network Security Architecture: Expert-level understanding of securing data-in-motion via MACsec (Layer 2), IPsec (Layer 3), and TLS 1.3.</li>
<li>Operations Management: Proven ability to manage a team of engineers and admins while balancing uptime requirements with rigorous security protocols.</li>
<li>U.S. Citizenship is required.</li>
</ul>
<p><b>Preferred Qualifications:</b></p>
<ul>
<li>Familiarity with DoS environment (data and voice networks, IT security systems, policies and procedures), Foreign Affairs Handbooks (FAHs), Foreign Affairs Manuals (FAMs) preferred.</li>
<li>Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.</li>
<li>Previous COMSEC experience</li></ul><br>
<p></p>
<p><b>
Compensation:</b></p>
<p>
Salary Range: TBD</p>
<p>
The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.</p>
<p>
Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate's combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.</p>
<p>
In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.</p><p></p><div>
<p></p>
<p><b>What We Can Offer You:</b></p>
<ul>
<li>At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.</li>
<li>Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched</li>
<li>Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.</li>
<li>Flexible Work Environment</li>
</ul>
<p></p><p>SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.</p>
<p>
SkyePoint Decisions is a participating E-Verify Employer.</p>
<p>
U.S. Citizenship is required for most positions.</p>
<p>
Equal Opportunity Employer/Veterans/Disabled.</p><br>
<p></p>
<p>
CCPA Disclosure Notice Here</p></div></div>

Network Security Operations Manager

Search 10000+ It security manager jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 it security manager jobs Near Me

SOC Manager (IT Cyber Security Manager 2)

Security Manager

Security Manager

Information Security Manager

Manager - Vulnerability Management

CHIEF INFORMATION SECURITY OFFICER (IT)

Network Security Operations Manager