Information Security Manager - IAM

FHLB Des Moines; Des Moines (IA); Hybrid; USD 128,000 - 152,000; Full time

Benefits offered by this job

Hybrid work schedule

Total Rewards program

Paid holidays

Job summary

FHLB Des Moines is seeking a senior Information Security leader to plan, organize and manage an information security team. You will partner with IT to build and maintain protection for data systems, networks and applications against cyber threats.

The role provides strategic direction for identity lifecycle management, SSO and MFA, with oversight of Sailpoint IIQ and cloud identity platforms. We offer hybrid work, competitive pay, generous PTO and 401(k) matching as part of our Total Rewards

Qualifications

• Bachelor’s degree or equivalent work experience in information security, computer science, or a related field.
• Extensive knowledge of data security, access management and information systems.
• Experience with SAML and OAuth protocols and provisioning on identity platforms.
• Strong written and verbal communication skills.
• 5–10 years’ experience managing projects and developing security policies and procedures.

Responsibilities

• Plan, organize, and manage an information security team.
• Partner with IT to build and maintain information security systems.
• Provide strategic direction for identity lifecycle management, authentication, SSO, and privileged access management.
• Organize security investigations and implement corrective actions.
• Develop and deliver education for information security best practices.
• Perform risk assessments and prioritize remediation actions.
• Lead regulatory communications and ensure compliance across controls.
• Oversee network and infrastructure security design, deployment, and monitoring.
• Lead incident response and post-incident analyses.

Skills

SSO

MFA

Identity lifecycle

Privilege access

SAML

OAuth

Entitlements/provisioning

Active Directory

Education

Bachelor’s degree in information security or computer science

Tools

Sailpoint IIQ

Active Directory

Cloud identity platforms

Job description

At FHLB Des Moines, we work each day to develop an inclusive culture that supports and leverages the complexity of a diverse workforce. This enables us to effectively serve the needs of our members and help them succeed.Plans, organizes, and manages an information security team. Partners with IT and builds and maintains information security systems to ensure that data systems, databases and networks are protected from unauthorized users. Provide strategic direction and operational oversight for identity lifecycle management, authentication services, single sign-on, enterprise MFA, and credential and privileged access management. Organize the security investigation and implementation of corrective actions. Provides Bank with appropriate education and training to support Information Security best practices. Performs risk assessments to understand and prioritize risk and proposed actions. Delivers enhancements and projects to improve the security defenses of the Bank. Stays informed about new regulations and standards that bring new requirements or best practices to the Bank. Provides security oversight to the Bank, utilizing tools to find gaps in meeting policies. Understand and ensure the department is meeting our security controls obligations.Accountabilities:Responsibilities/Duties/Function/Tasks:Manage and deliver technical project and enhancements.Propose and partner with Bank to deliver on security improvements, close gaps, or address controls issue.Partner with Internal Audit, SOX & Enterprise risk, to ensure we are interlocked in improving information security and addressing issues.Ensure we have a security response plan, and partner with the business to ensure readiness for a cyber event.Ensure appropriate controls are maintained for joiner, mover, and leaver processes.Identify opportunities for automation within team processesUnderstand gaps in information security program (NIST Gap assessment) and propose actions to close gaps.Ensure on-going education of teams, as required by many regulations and best practices.Provide updates to regulators on any information requests.Ensure high qualified staff to address the responsibility of the team.Work with employees to keep up with emerging threats and practices to improve security posture.Manage and develop high performing team members through communication, feedback, coaching and completion of mid-year and year end performance evaluations.Identify strengths and weaknesses in team members and provide training to improve skills and knowledge.Manage departmental regulatory issues and internal controls.Serve as an escalation point of contact for cybersecurity, IT and business unit guidance.Develop and implement comprehensive cybersecurity strategies, policies, and procedures to protect the organization's information assets from cyber threats.Collaborate with senior management to assess security risks, prioritize initiatives, and allocate resources effectively.Stay abreast of emerging threats, industry best practices, and regulatory requirements to ensure the organization's security posture remains current and effective.Oversee the design, implementation, and maintenance of the organization's network infrastructure, including routers, switches, firewalls, and VPNs.Monitor network performance, troubleshoot issues, and implement solutions to optimize reliability, scalability, and security.Collaborate with cross-functional teams to plan and execute network upgrades, expansions, and migrations while minimizing disruptions to business operations.Develop and maintain incident response plans and procedures to effectively detect, contain, and mitigate cybersecurity incidents.Lead investigations into security breaches, coordinate with relevant stakeholders, and implement corrective actions to prevent future incidents.Qualifications:Bachelor’s degree in information security, computer science or equivalent work experience.Extensive knowledge of data security, access management and information systems.Specific knowledge of data security standards, procedures and products.Knowledge of risk management and effective control procedures, project management.Understanding of SSO, MFA, identity lifecycle management, and privilege access managementExperience with protocols such as SAML and OAuth, and managing entitlements/provisioning on a platform such as Sailpoint IIQStrong understanding of Active Directory and cloud identity platformsExcellent written and verbal communication skills.5-10 years’ experience managing projects, work experience in developing and reviewing policies, methodologies, and procedures for security.Compensation Range:Annual Salary: $128,211.00 - $152,251.00This salary range represents the Bank’s good faith and reasonable estimate of possible compensation at the time of hire. Offer to be determined by selected applicant’s education, experience, knowledge, skills & abilities, as well as internal equity and alignment with market data. This role is also eligible to participate in the Bank’s annual incentive plan.As part of our competitive Total Rewards package, the Bank offers 11 paid holidays, 5 weeks of PTO and a work culture that values work/life balance. Most roles are eligible for our hybrid work schedule. We match 100% of the first 6% you contribute to your 401(k) and provide an additional 4% non-discretionary contribution to your 401(k) at the end of year. More information on our Total Rewards program can be found here .At FHLB Des Moines, we work to create an inclusive culture. This enables us to effectively serve the needs of our members and help them succeed. FHLB Des Moines is proud to be an Equal Opportunity Employer. We prohibit discrimination on the basis of race, color, religion, sex (including pregnancy, sexual orientation or gender identity), national origin, age, disability, veteran status, genetic information (including family medical history), status as a parent or any other characteristic protected by federal, state or local law.