Hybrid InfoSec Leader - Risk & Compliance

Confidential; Pittsburgh (Allegheny County); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Confidential in Pittsburgh seeks a Manager, Information Security to strengthen and oversee governance, risk, compliance, and security operations across on-premises and cloud environments. This role partners with IT and business leaders to identify risks and implement effective controls.

Responsibilities include leading security programs (ISO 27001/27701, PCI-DSS), overseeing security architecture, monitoring, incident response, and developing personnel.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Minimum of 10 years of experience in information technology, including at least 5 years of information security experience.
• At least 3 years of experience managing technical security engineers or similar security-focused personnel.
• Strong IT operations background with networking, systems administration, infrastructure, software development, or related technical disciplines.
• Demonstrated experience implementing and maintaining ISO 27001 and ISO 27701 programs.
• Experience managing security governance, risk, compliance, and operational security functions.
• CISSP, CISM, CEH, CIPP, or comparable security certification is highly desirable.
• Candidates pursuing relevant professional certifications may be considered.
• Ability to travel to other organizational offices or locations as required.

Responsibilities

• Develop, maintain, and improve information security policies, procedures, standards, and governance processes.
• Lead security risk management activities, including threat intelligence, risk assessments, risk analysis, and mitigation planning.
• Manage security compliance programs, including ISO 27001, ISO 27701, PCI-DSS, client assessments, audits, and security questionnaires.
• Oversee security resources, budgets, vendors, and managed security service providers.
• Lead security awareness and training initiatives and advise IT, leadership, and business teams regarding emerging threats, policies, controls, and security best practices.
• Review security architecture and designs for network, systems, applications, identity, collaboration, and cloud infrastructure.
• Manage ongoing security monitoring, testing, audits, remediation activities, and compliance tracking.
• Oversee security detection and response capabilities, including log aggregation, correlation, analysis, incident response, and recovery.
• Provide leadership and oversight for security technologies and operational functions, including firewalls, network segmentation, vulnerability management, privileged and remote access, EDR/NGAV, SIEM, email security, and continuous monitoring.
• Lead and prioritize security projects, administrative initiatives, and continuous improvement efforts.
• Manage, mentor, and develop technical security engineering personnel.
• Collaborate with IT, business leadership, and other stakeholders to identify security requirements and implement appropriate controls.
• Maintain strict confidentiality of sensitive organizational, client, employee, and business information.

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field

Job description

Confidential in Pittsburgh seeks a Manager, Information Security to strengthen and oversee governance, risk, compliance, and security operations across on-premises and cloud environments. This role partners with IT and business leaders to identify risks and implement effective controls.

Responsibilities include leading security programs (ISO 27001/27701, PCI-DSS), overseeing security architecture, monitoring, incident response, and developing personnel.