Information Security Manager

ConvaTec Inc.; Tempe (AZ); Remote; USD 125,000 - 150,000; Full time

Job summary

A healthcare technology company is seeking an experienced Information Security Manager to oversee the management of their information security systems. This role requires defining risks, developing policies, and managing security controls to ensure the integrity and confidentiality of sensitive information. The ideal candidate has over 10 years of IT experience, with at least four years in Information Security, and a relevant degree. Competitive benefits and the option to work remotely are available.

Benefits

100% PAID medical and dental

401K with 6% match

Generous PTO policy

On-site workout facility

Qualifications

• Minimum 10 years of overall experience in IT.
• Minimum of four years’ experience in Information Security.
• CISSP is recommended but not required.

Responsibilities

• Manage information security management system (ISMS).
• Identify and document information assets containing sensitive data.
• Investigate and enforce information security policies.

Skills

Knowledge of network infrastructure

Strong verbal and written communication skills

Ability to translate business requirements

Understanding of information risk concepts

Ability to work independently

Influencing key stakeholders

Education

Bachelor's degree in computer science or equivalent experience

CISA and/or CISM

Experience in NIST Cyber Framework

Job description

Information Security Manager page is loaded

Information Security Manager

Apply locations Oklahoma City - Oklahoma, US time type Full time posted on Posted Yesterday job requisition id JR00015467 Position Overview:

180 medical/HSG IT is looking for an experienced Information Security Manager who works independently, ensures information is protected (confidentiality, integrity, and availability) and applies practical knowledge of job obtained through education and work experience.

This role will:

• Define Information Security Risks
• Develop infosec policies, standards, and control frameworks to mitigate these risks.
• Deploy and manage information security controls.
• Investigate and enforce information security policies.
• Assist with obtaining and maintaining security certifications.

Key Responsibilities:

• Manage information security management system (ISMS).
• Identify and document information assets containing sensitive data and ensure access reviews of critical systems.
• Identify information security risks.
• Protect classified information.
• Assurance over partners (IT outsourcers and SAAS)
• Maintain retention policy and register.
• Identify, report and governance over information security risks.
• Manage DLP policy and respond to alerts.
• Monitor intended leavers for potentially risky behaviors.
• Monitor and investigate data leakage incidents.
• Implement and manage eDiscovery and Litigation Hold
• Fulfil eDiscovery and litigation hold requests and annual reviews.
• Manage information security awareness plan, deliver, and maintain information security awareness training.
• Automate collection and insertion into consolidated centralize evidence hub(Diligent as example)
• Ensure near misses and policy breaches are followed upon as necessary (with training)
• Conduct Phishing Campaigns.
• Provide security awareness and compliance metrics demonstrating effectiveness of awareness plan.
• Identify infosec risks across projects and business processes.
• Information protection across key systems.
• Provide requirements for projects to mitigate information security risks.
• Perform initial vendor assessment and ongoing assurance over key vendors and service providers.
• Assist in implementing the Information security strategy across 180 medical/HSG.

Qualifications/Education:

• Knowledge of network infrastructure, including routers, switches, firewalls, moderate Database query abilities and associated network protocols and concepts.
• Strong verbal and written communication skills
• Ability to facilitate cross-functional teams.
• Ability to translate business requirements into control objectives.
• Knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls.
• Ability to work independently with limited supervision.
• Ability to demonstrate that you can influence others (key stakeholders including business) through explanation of facts, policies, and practices.
• Bachelor's degree in computer science, Information Systems, Software Engineering, or equivalent experience
• CISA and/or CISM
• Experience in NIST Cyber Framework
• Minimum 10 years of overall experience in IT
• Minimum of four years’ experience in Information Security
• CISSP is reccomended but not required.

Physical Demands

• Regularly required to sit, stand, walk, and occasionally bend and move about the facility.
• Infrequent light physical effort required.
• Occasional lifting up to 30 lbs.
• Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Working Conditions

• Work performed in an office environment,

Special Factors

• This role can be performed remotely.

Beware of scams online or from individuals claiming to represent Convatec

A formal recruitment process is required for all our opportunities prior to any offer of employment. This will include an interview confirmed by an official Convatec email address.

If you receive a suspicious approach over social media, text message, email or phone call about recruitment at Convatec, do not disclose any personal information or pay any fees whatsoever. If you’re unsure, please contact us at [e-mail] .

Equal opportunities

Convatec provides equal employment opportunities for all current employees and applicants for employment. This policy means that no one will be discriminated against because of race, religion, creed, color, national origin, nationality, citizenship, ancestry, sex, age, marital status, physical or mental disability, affectional or sexual orientation, gender identity, military or veteran status, genetic predisposing characteristics or any other basis prohibited by law.

Notice to Agency and Search Firm Representatives

Convatec is not accepting unsolicited resumes from agencies and/or search firms for this job posting. Resumes submitted to any Convatec employee by a third party agency and/or search firm without a valid written and signed search agreement, will become the sole property of Convatec. No fee will be paid if a candidate is hired for this position as a result of an unsolicited agency or search firm referral. Thank you.

Already a Convatec employee?

If you are an active employee at Convatec, please do not apply here. Go to the Career Worklet on your Workday home page and View "Convatec Internal Career Site - Find Jobs". Thank you!

About Us

We are thrilled to announce that 180 Medical has once again been chosen as one of the Best Places to Work in Oklahoma! This is such an honor because it’s based on our employees’ feedback. We truly appreciate being recognized as a company that treats its employees with as much care and consideration as we do our customers.

As one of America’s leading providers of urological and ostomy supplies, we are committed to meeting the diverse needs of our customers while providing world-class service. When it comes to growth and expanding our teams, we focus on recruiting employees who are hardworking individuals and genuinely driven to help others.

180 Medical offers a competitive benefits package including 100% PAID medical and dental, 401K with 6% match, a generous PTO policy and Paid Holidays. In addition, we provide many perks to our employees such as an on-site workout facility, daily continental breakfast, casual dress code and a fun atmosphere. These feel that these just some of the reasons we continue to be voted one of the Top Places to Work in Oklahoma!

I f you would like to know how we intend to use your data following your application please refer to our full data privacy policy on the following link: https://www.convatecgroup.com/privacy-policy/