Information Security and Privacy Manager

Aerotek; Hannover; Vor Ort; USD 100.000 - 145.000; Vollzeit

Zusammenfassung

An established industry player is seeking an Information Security and Privacy Manager to oversee the protection of sensitive information assets. This pivotal role involves leading security initiatives, managing incidents, and ensuring compliance with evolving regulations. The ideal candidate will possess a strong background in information security operations, excellent communication skills, and the ability to drive improvements across the organization. Join a dynamic team where your expertise will directly impact the security landscape and contribute to a culture of awareness and responsibility regarding information security and privacy.

Leistungen

Medical, dental & vision

401(k)/Roth

Insurance (Basic/Supplemental Life & AD&D)

Short and long-term disability

Health & Dependent Care Spending Accounts

Transportation benefits

Employee Assistance Program

Tuition Assistance

Time Off/Leave (PTO, Parental Leave)

Qualifikationen

• 5+ years in information security operations with a focus on incident response.
• Strong negotiation and interpersonal skills required for effective communication.

Aufgaben

• Lead investigations on security incidents and communicate with stakeholders.
• Educate personnel on information security policies and procedures.

Kenntnisse

Incident Response

Information Security Management

Risk Assessment

Interpersonal Skills

Project Management

Negotiation Skills

Problem Solving

Ausbildung

University degree in Information Security

Certification in Privacy (CIPP, etc.)

Tools

ITILv3

Network+

Security+

CISSP

Jobbeschreibung

Overview

Aerotek has an immediate opening for an Information Security and Privacy Manager at the corporate office in Hanover, MD.

Job Summary:

The Information Security and Privacy Manager is responsible for securing Aerotek’s sensitive information assets and managing the Information Security program within the operating company. In addition to reviewing contract language, assisting with requests for proposal and security questionnaires, responding to incidents, and creating awareness regarding information security and privacy within the organization, the Information Security and Privacy Manager identifies areas for improvement and drives information security and privacy initiatives within the business and across the enterprise. The Information Security and Privacy Manager serves as a subject matter expert and consultant regarding information security and privacy topics.

Essential Functions:

1. Lead investigations and be the point person regarding incidents involving contractors, clients, and employees. This will involve interacting with executive leadership as well as executive leadership at the client, as needed, and documenting and communicating incident details to stakeholders.
2. Review information security/privacy language in and participate in the negotiation of customer and vendor contracts and provide training and guidance on these topics periodically.
3. Assist with proposal content specific to information security/privacy and complete security questionnaires.
4. Educate field personnel and corporate partners regarding information security and privacy policies and procedures.
5. Partner with Allegis Information Security Office/Allegis Group Privacy Office and other departments to drive information security and privacy initiatives across the company and enterprise.
6. Participate in the creation of enterprise security and privacy documents (policies, standards, baselines, guidelines, and procedures) and communications (intranet articles and email campaigns).
7. Coordinate rental assets, encryption, and similar security solutions for the business. This includes reviewing and approving the monthly rental asset reports for accuracy.
8. Coordinate associated security activities with contractor on-boarding as well as end of assignment/off-boarding steps.
9. Maintain up-to-date detailed knowledge of the IT security and data privacy industry including awareness of new or revised solutions, improved processes, and the development of new attacks and threat vectors.
10. Recommend additional solutions or enhancements to existing security solutions to improve overall enterprise security.
11. Stay abreast of existing, emerging, and newly passed privacy regulations.
12. Manage information security/privacy projects and respond to ad hoc requests.

Supervisory or Management Responsibilities:

1. Management responsibility for team including hiring, leadership, development, and accountability for performance.
2. Provides leadership and guidance to coach, motivate, and lead team members to their optimum performance.

Minimum Education/Abilities/Skills:

1. University degree in the field of information security, business administration, or another related field.
2. 2 years’ experience working in an information security operation.
3. 5 years’ experience working in the IS industry, preferably information security operations.
4. Ability to respond to incidents, perform analysis tasks, and communicate effectively with your constituency and other external contacts.
5. Experience with assessing information security and compliance risks and mitigating.
6. Competent problem-solver that can adapt easily to change and be effective in daily activities.
7. Ability to present ideas in business-friendly and user-friendly language.
8. Excellent interpersonal skills and strong negotiating skills.
9. Understanding of project management principles.

Special Requirements:

1. Certifications such as ITILv3 and security-related certifications (Network+, Security+, CISSP, etc.) preferred but not required.
2. Certification in Privacy such as CIPP-US, CIP-M, CIPP-E, CIP-T, FIP, preferred but not required.
3. In-depth knowledge of applicable laws and regulations as they relate to information security such as CFR 45, HIPAA/HITECH, FISMA, EU Contractual Clauses, GDPR, GLBA, MAS201, etc.
4. Must be willing to obtain one of the above certifications within the first 2 years in the role.

Per Pay Transparency Acts: The range for this position is $100,000 - $145,000 + annual bonus potential of $10,000.

Benefits are subject to change and may be subject to specific elections, plan, or program terms. This role is eligible for the following:

• Medical, dental & vision
• 401(k)/Roth
• Insurance (Basic/Supplemental Life & AD&D)
• Short and long-term disability
• Health & Dependent Care Spending Accounts (HSA & DCFSA)
• Transportation benefits
• Employee Assistance Program
• Tuition Assistance
• Time Off/Leave (PTO, Primary Caregiver/Parental Leave)