Information Security Manager

Infovisa, Inc; Cornelius (NC); On-site; USD 80,000 - 130,000; Full time

Job summary

A leading financial technology company is seeking an Information Security Manager in Cornelius, NC. The successful candidate will manage security policies, oversee vulnerability management, and lead a security team to maintain robust security measures. Candidates should possess extensive information security experience and strong technical aptitude.

Qualifications

• 10 years of information security experience required.
• Three years of management experience.
• Displays strong technical aptitude with various IT security tools.

Responsibilities

• Defines, implements and monitors security policy.
• Maintains security posture to prevent breaches.
• Hires and trains an IS Engineer.

Skills

IT Security

VPN

Endpoint Detection and Response

Networking concepts

Education

Four-year degree in information technology / systems or computer science

Tools

Check Point technologies

Job description

Location: Cornelius, NC
FLSA Status: Exempt
Immediate Supervisor: CISO
Date Revised: February 18, 2025
Position Summary: The Information Security Manager is a hands-on/ working manager position that defines, implements and monitors security policy for on-prem, cloud, and remote access deployments. The primary duty of the job is to maintain a security posture that allows the business to thrive while preventing a security breach. The IS Manager hires, retains, and trains an IS Engineer to assist with day-to-day duties. The IS team maintains on-premises firewall rules and active directory as well as overseeing vulnerability management. In the cloud, the IS Manager is responsible for designing security measures, and the IS team is responsible for their implementation and monitoring. The IS team also designs, implements, and maintains a remote access VPN for associates when working outside the corporate offices.
Essential Functions :

• Demonstrate an understanding of all applications deployed, and data stored within the enterprise.
• Demonstrate an understanding of security measures that are in place and their role in securing the enterprise.
• Assess the threat of zero-day vulnerabilities and third-party risk to the enterprise. Take action to remediate such vulnerabilities. Effectively report status to executive management in terms of the threat level and associated risk.
• Assess risks related to general threat landscape. Identify, design and implement controls to mitigate those threats and prevent security breaches.
• Measure, monitor, and report on vulnerabilities that have been identified within the enterprise.
• Maintain on-premises firewall rules; maintain cloud security settings and restrictions; maintain remote access rules and restrictions.
• Identify new security related vendors as needed and assist in evaluating new and existing vendors from a security perspective.
• Participate and communicate effectively in external audits, third-party vulnerability scans, and regulatory examinations.
• Maintain, comply with, and develop Infovisa’s policies, procedures, and strategies to provide a safe and efficient environment for Infovisa software to run and associates to work.
• Liaison with IT-ISAC, InfraGard, and other industry groups.
• Manage projects and create detailed technical documentation.
• Hire, train, mentor and manage associates on the security team.

Location: Cornelius, NC
FLSA Status: Exempt
Immediate Supervisor: CISO
Date Revised: February 18, 2025
Position Summary: The Information Security Manager is a hands-on/ working manager position that defines, implements and monitors security policy for on-prem, cloud, and remote access deployments. The primary duty of the job is to maintain a security posture that allows the business to thrive while preventing a security breach. The IS Manager hires, retains, and trains an IS Engineer to assist with day-to-day duties. The IS team maintains on-premises firewall rules and active directory as well as overseeing vulnerability management. In the cloud, the IS Manager is responsible for designing security measures, and the IS team is responsible for their implementation and monitoring. The IS team also designs, implements, and maintains a remote access VPN for associates when working outside the corporate offices.
Essential Functions :

• Demonstrate an understanding of all applications deployed, and data stored within the enterprise.
• Demonstrate an understanding of security measures that are in place and their role in securing the enterprise.
• Assess the threat of zero-day vulnerabilities and third-party risk to the enterprise. Take action to remediate such vulnerabilities. Effectively report status to executive management in terms of the threat level and associated risk.
• Assess risks related to general threat landscape. Identify, design and implement controls to mitigate those threats and prevent security breaches.
• Measure, monitor, and report on vulnerabilities that have been identified within the enterprise.
• Maintain on-premises firewall rules; maintain cloud security settings and restrictions; maintain remote access rules and restrictions.
• Identify new security related vendors as needed and assist in evaluating new and existing vendors from a security perspective.
• Participate and communicate effectively in external audits, third-party vulnerability scans, and regulatory examinations.
• Maintain, comply with, and develop Infovisa’s policies, procedures, and strategies to provide a safe and efficient environment for Infovisa software to run and associates to work.
• Liaison with IT-ISAC, InfraGard, and other industry groups.
• Manage projects and create detailed technical documentation.
• Hire, train, mentor and manage associates on the security team.

Qualifications:

• 10 years of information security experience required.
• Three years of management experience.
• Displays strong technical aptitude with IT Security, VPN, Endpoint Detection and Response, IIS, networking concepts and technologies, and other third-party and internally developed tools and technologies.
• Prefer familiarity with Check Point technologies.
• Prefer one or more applicable network security certifications.
• Valid driver’s license.
• Four-year degree in information technology / systems, or computer science.

Preferred Talents:

• Analytical and detailed.
• Effective communicator technically, in the board room, and with customers and coworkers.
• Organized.
• Independent with good judgment.
• Proven ability to multitask and prioritize projects.
• Self-directed and takes initiative.

Working Environment:
Mostly indoor work with occasional exposure to outdoor elements or hazards.
Medium workload – lifting and/or carrying up to 20 pounds frequently and exerting up to 75 pounds of force occasionally.
Some travel required.
Weekend, evening and on-call.
About Infovisa
Infovisa is a leading provider of financial technology solutions delivered to forward-thinking trust, wealth management, and retirement professionals. Infovisa’s solutions empower its clients to acquire new customers, invest assets effectively, manage trust and investment portfolios efficiently, and flexibly report results to customers. For more information about Infovisa, visit www.infovisa.com . Follow us on LinkedIn .

We are interested in every qualified candidate who is lawfully eligible to work in the United States. However, we are unable to sponsor visas.

Infovisa, Inc. is an Equal Opportunity Employer.

Infovisa is unable to sponsor visa's. Are you eligible to work for any company within the United States without a visa (answer no if you have a visa that is required for you to work in the US)?*

This is primarily an in-office position. Do you live close enough to our headquarters in Cornelius, NC to commute on a daily basis? If not, would you intend to move if you were to accept this position?*

This position is mostly hand-on and one of the most important skillsets is maintenance of the firewall rules. Please describe your experience in detail as it related to crafting and maintaining firewall rules.*

Please describe in detail any experience you have with crafting security models within the AWS ecosystem. Include the names of the services used to accomplish the goals of the models. (Answer none if you haven't worked with AWS security.)*

Please describe in detail any experience you have with setting up a remote access solution for work from home and/or work while travelling associates. (Answer none if you have never been involved in the design of such a solution.)*

Please tell us why you chose to apply for this position. You may include what you found appealing in the ad itself, what you found when you did further research into our company, or anything else that you consider to be relevant.*