Information Security Operations Manager

Operations/Project Management

General Summary

The Information Security Operations Manager provides technical leadership, expertise, and direction to design and implement Information Security strategies and roadmaps. This position executes security assessments to ensure the protection of Southern Research information assets and compliance with applicable laws and industry regulations. This position also provides proactive operational responsibility for Information Security incident prevention, detection, and remediation. The Information Security Manager is responsible for the supervision of the security staff including selection, training, coaching, mentoring, evaluation and compensation as well as the efficient, effective operation of the Information Security department in accordance with established policies and procedures and Southern Research strategic goals and mission.

Key Responsibilities

  • Responsible for managing the Information Security team, prioritizing tasks, coordinating activities, managing stakeholders and reporting key performance indicators (KPIs).
  • Responsible for mentoring and fostering the overall development of the Information Security team employees, including; training and ongoing development, coaching, selection and hiring process, and also the promotion and performance evaluation of the Information Security team employees.
  • Manage Threats & Vulnerabilities to new and existing internal and external services
  • Responsible for ensuring the confidentiality, integrity, and availability of Southern Research and customer’s data and applications across the organization
  • Lead and assist in the management of Security Problems and Incidents.
  • Facilitate continuous improvement of Information Security maturity across the organization.
  • Oversee the research and analysis of designated security systems, and coordinate the feasibility, cost, justification, selection, and purchase of said systems.
  • Collaborate with the Governance Risk and Compliance team to facilitate and promote activities to create Information Security awareness within the organization.
  • Work with the Information Security team and collaborate with other Information Security functions within the industry to build strong relationships, share information and understand new and emerging risks within the industry
  • Perform technology risk assessments on Southern Research’s information systems and business processes, both independently and in collaboration with the Governance Risk and Compliance team.
  • Research, recommend, and implement risk mitigation strategies that are aligned with business goals and objectives
  • Ensure that the Southern Research is implementing technical controls conforming to Information Security best practice standards
  • Develop, maintain, and review Southern Research’s incident response plan outlining specific courses of action that will be taken if network resources or data have been compromised
  • Coordinate technical staff across multiple teams in response to Information Security incidents
  • Assist in the ongoing development and testing of all IT disaster recovery procedures.
  • Assist in the ongoing design and implementation of Southern Research’s Information Technology systems and network security solutions in a complex enterprise computing environment
  • Provide guidance and direction to other management and staff for special system capabilities or problems and resolutions
  • Maintain constant relationships with Infrastructure and Operations teams across technology functions to ensure that Information Security risks are mitigated to an appropriate level
  • Serve as Information System Security Manager (ISSM) within classified environment.

Citizenship 

The position requires US Citizenship. 

Minimum Qualifications: 

  • A working knowledge of IT hardware and basic set of applications

Preferred Qualifications:

  • Overall knowledge on IT hardware and software procurement and renewal processes.
  • Previous customer service experience strongly desired.
  • Associate degree in Computer Science, MIS, Information Technology or related field.
  • 3+ years’ experience in Helpdesk/Desktop Support environment, including the ability to diagnose and resolve technical hardware and software issues.
  • 3+ years’ experience with installation and support of: Windows OS client, Microsoft Office, VPN client, Encryption and Anti-Virus software.
  • Demonstrate knowledge and experience in general IT domains such as network, server, storage, MS Active Directory, etc.

Interpersonal Skills

  • Excellent interpersonal and customer service skills; friendly presence and helpful attitude; ability to work well with others
  • Excellent communication skills, both written and verbal; good presentation skills
  • Ability to provide technical support over the phone; good phone skills, professional demeanor, previous customer service experience strongly desired.
  • Requires a high degree of organizational and project management skills.
  • Must be able to work under stress with short timelines.
  • Ability and affinity to succeed in a fast-paced environment while multi-tasking.
  • Ability to manage time effectively, multi-task and adapt to changes quickly in a fast-moving environment.
  • Able to work a flexible schedule, weekends, holidays or on call as needed.
  • Good problem-solving skills; ability to visualize a problem or situation and think abstractly to solve it.
  • Creativity. Ability to work around problems and come up with creative solutions.
  • Ability to work with or without direct supervision.
  • Exercise patience and professionalism during stressful situations.
  • Must be a team player and cultivate partnerships within the organization.
  • Occasional short notice travel might be required

Core Values

Integrity – we adhere to a code of sound ethical behavior that builds trust and confidence in all we do.  We clearly communicate expectations and provide reliable results and candid feedback to our employees, customers and stakeholders.

Safety & Environment – we are an environmentally conscious, safety first organization.  We value our employees and our planet and conduct our business consistent with that priority.

Excellence – we understand and consistently meet or exceed our internal and external customer’s expectations. We are accountable for timelines, quality and cost.

Individual and Community Focused – we promote and open, collaborative and supportive environment by respecting the rights and contributions of every individual.  We openly communicate information and ideas to our stakeholders, customers, employees, and the larger community.

Innovation – we explore ideas and create solutions to global needs.  We use science and engineering to solve the world’s most difficult problems.

Job Specific Behaviors

Relationship Orientation – Develops positive relationships by making others feel their concerns and contributions are important.

Continuous Learning – Proactively seeks performance feedback and identifies approaches to improve personal and others performance and learning.

Tolerance for Stress, Ambiguity & Change – Demonstrates flexibility in applying different approaches to changing work demands.

Effective Communication – Creates a team environment in which information flows freely and decision making is based on a win-win philosophy.

Customer Focus –Responds to customer’s needs in a manner that provides added value and generates significant customer satisfaction.

Compliance – Applies an understanding of legal precedents, policies and practices to protect the interests of the organization.

Cross-team Collaboration – Ensures integration and cooperation across organizational boundaries.

Service Development, Delivery, Refinement and Quality – Manages service delivery to ensure high levels of customer impact and satisfaction. Constantly focuses on the continuous improvement of services and processes.

Work Environment & Conditions

This position is typically found in an office setting.

Certifications, Licenses & Registrations

Security+ certification (or similar) is helpful.

Powered By GrowthZone