Information Security Manager

Wright State University; Dayton (OH); On-site; USD 110,000 - 150,000; Full time

Job summary

Wright State University is seeking a seasoned Information Security Manager to lead the Information Security staff and oversee a portfolio of secure systems. You will guide security architecture, align with university policies, and protect data confidentiality, integrity, and availability across campus networks.

Responsibilities include managing the SIEM, performing vulnerability assessments, advising on compliance, and directing a team to strengthen defenses.

Qualifications

• Bachelor's degree in Computer Science or related field with 8–10 years of systems or network administration experience.
• One year of supervisory experience.
• Working knowledge of networking products and protocols.
• Experience designing and implementing IDS/IPS solutions.
• Understanding of security concepts: IDS, IPS, Firewalls, and log analysis.
• Ability to work independently and mentor a team.
• Ability to learn new technologies rapidly.
• Strong verbal and written communications.
• Knowledge of Perl, shell scripting, Nmap, Nessus and log analysis.

Responsibilities

• Design and develop security architecture for enterprise network firewalls, IPS, and WAF.
• Maintain and administer these systems, perform upgrades and changes.
• Manage the enterprise SIEM.
• Perform vulnerability assessments and advise on remediation.
• Advise system owners on data security compliance.
• Perform internal and external vulnerability scanning and pentesting.
• Evaluate vulnerability scanner products for best solution.
• Manage day-to-day operations and mentor staff.
• Advise on security best practices and university policies.
• Direct staff to achieve departmental goals.
• Develop and enforce information security policies with CISO, align with regs.
• Stay current with federal/state law; advise management.
• Perform periodic security audits and review server logs.
• Provide guidance to end users on security requirements.
• Serve as member of computer emergency response team; act as primary during incidents in CISO absence.

Skills

Security operations

Network security

Team supervision

IDS/IPS implementation

Policy development

Scripting (Perl, shell)

Nessus / vulnerability tools

Log analysis

Education

Bachelor's degree in Computer Science or related field

Tools

IDS/IPS

SIEM

Firewalls

Nmap

Nessus

Job description

: Manage the information security department. Assure the ongoing operation of an array of secure systems, providing guidance to members of the Information Security staff. This position supports multiple IT project security needs; advising end users as to new system security requirements and proper placement within the WSU network environment. Secure the University's information assets against internal and external cyber-attacks. Maintain, monitor, analyze, and administer various information security tools, as well as develop relevant policies and procedures to promote confidentiality, integrity, and availability of university data. Participates in the design and implementation of security strategies and policies.

Minimum Qualifications

• Bachelor's degree in Computer Science or related field and 8-10 years' experience in systems or network administration. One year of supervisory experience.
• Working knowledge of networking products. Practical working knowledge of network protocols and fundamentals.
• Experience designing and implementing IDS/IPS solutions.
• Understanding of security concepts, such as IDS, IPS, Firewalls, and Log file analysis.
• Ability to work independently yet contributes to the overall success of the team.
• Ability to learn new technologies rapidly.
• Good verbal and written communications skills.
• Knowledge of languages and concepts commonly used in testing and security research: Perl, shell scripting, Nmap, Nessus, including log file analysis.

Preferred Qualifications

• CISSP certification or equivalent.

30%:

Essential Functions and percent of time

• Design and develop security architecture associated with the University's enterprise network firewalls, IPS (Intrusion Prevention System), and WAF (web application firewall).
• Maintain and administer these systems as needed, performing major upgrades, implementing changes, and optimizing hardware and software for maximum efficiency, security, and performance.
• Manage the enterprise SIEM (security information and event management system).
• Perform vulnerability assessments of the University's critical and/or high-value information systems, making recommendations to system owners and administrators on how to correct weak spots in their respective systems.
• Assist and advise system owners, administrators, and internal compliance staff regarding data security compliance.
• Perform internal and external enterprise vulnerability scanning, and network penetration testing with various security tools.
• Perform vulnerability scanner product evaluation and testing to continually ensure best solution, implementation, and pricing. 30%:
• Manage the day‑to‑day operations of the security department, guiding and mentoring members of the department
• Advise the team on security best practices, university policy, and procedures.
• Direct staff as needed to accomplish departmental goals. 30%:
• Works with the CISO to develop and enforce information security and privacy policies in compliance with federal and state regulations and standards.
• Stay current with Federal and State regulatory law, advising management as to the potential impact on the university computing environment.
• Perform periodic security audits of university systems. Present audit finding to management personnel. Regularly review server logs to detect server, network and security issues in order to diagnose and correct potential network problems.
• Provide advice and guidance to end users concerning system security requirements, data compliance, and security best practices. 10%:
• Serve as a member of computer emergency response team.
• In the absence of the CISO, becomes the primary control point during significant information security incidents.