Information Security Manager - IAM

Federal Home Loan Bank of Des Moines; Des Moines (IA); Hybrid; USD 128,000 - 152,000; Full time

Benefits offered by this job

Hybrid work schedule

401(k) matching

Paid holidays and PTO

Job summary

Federal Home Loan Bank of Des Moines is seeking an Information Security leader to plan, organize, and manage the security team. You will provide strategic direction for identity lifecycle management, SSO, MFA, and privileged access, while developing policies and controls to protect data assets.

You will partner with IT and business units to implement cybersecurity strategies, perform risk assessments, and lead investigations into security incidents.

Qualifications

• Bachelor’s degree in information security, computer science or equivalent work experience.
• Extensive knowledge of data security, access management and information systems.
• Knowledge of data security standards, procedures and products.
• Understanding of SSO, MFA, identity lifecycle management and privileged access management.
• Experience with SAML and OAuth and provisioning on Sailpoint IIQ.
• Strong understanding of AD and cloud identity platforms.
• Excellent written and verbal communication skills.
• 5-10 years’ experience managing security projects and policies.

Responsibilities

• Plan, organize, and manage an information security team.
• Provide strategic direction and operational oversight for identity lifecycle mgmt, authentication services, SSO, MFA and privileged access.
• Develop and implement cybersecurity strategies, policies, and procedures.
• Lead investigations into security breaches and coordinate corrective actions.
• Provide education and training on security best practices and regulatory requirements.
• Manage regulatory issues and internal controls; serve as escalation point for cybersecurity guidance.
• Oversee network design, deployment, and security, including VPNs, firewalls, and switches.
• Collaborate with senior management to assess risks and allocate resources.

Skills

Communication skills

Project management

Security leadership

Risk management

Education

Bachelor’s degree in information security or computer science

Tools

Sailpoint IIQ

Active Directory

Cloud identity platforms

Job description

At FHLB Des Moines, we work each day to develop an inclusive culture that supports and leverages the complexity of a diverse workforce. This enables us to effectively serve the needs of our members and help them succeed.

Plans, organizes, and manages an information security team. Partners with IT and builds and maintains information security systems to ensure that data systems, databases and networks are protected from unauthorized users. Provide strategic direction and operational oversight for identity lifecycle management, authentication services, single sign-on, enterprise MFA, and credential and privileged access management. Organize the security investigation and implementation of corrective actions. Provides Bank with appropriate education and training to support Information Security best practices. Performs risk assessments to understand and prioritize risk and proposed actions. Delivers enhancements and projects to improve the security defenses of the Bank. Stays informed about new regulations and standards that bring new requirements or best practices to the Bank. Provides security oversight to the Bank, utilizing tools to find gaps in meeting policies. Understand and ensure the department is meeting our security controls obligations.

Accountabilities:

Responsibilities/Duties/Function/Tasks:

• Manage and deliver technical project and enhancements.
• Propose and partner with Bank to deliver on security improvements, close gaps, or address controls issue.
• Partner with Internal Audit, SOX & Enterprise risk, to ensure we are interlocked in improving information security and addressing issues.
• Ensure we have a security response plan, and partner with the business to ensure readiness for a cyber event.
• Ensure appropriate controls are maintained for joiner, mover, and leaver processes.
• Identify opportunities for automation within team processes
• Understand gaps in information security program (NIST Gap assessment) and propose actions to close gaps.
• Ensure on-going education of teams, as required by many regulations and best practices.
• Provide updates to regulators on any information requests.
• Ensure high qualified staff to address the responsibility of the team.
• Work with employees to keep up with emerging threats and practices to improve security posture.
• Manage and develop high performing team members through communication, feedback, coaching and completion of mid-year and year end performance evaluations.
• Identify strengths and weaknesses in team members and provide training to improve skills and knowledge.
• Manage departmental regulatory issues and internal controls.
• Serve as an escalation point of contact for cybersecurity, IT and business unit guidance.
• Develop and implement comprehensive cybersecurity strategies, policies, and procedures to protect the organization’s information assets from cyber threats.
• Collaborate with senior management to assess security risks, prioritize initiatives, and allocate resources effectively.
• Stay abreast of emerging threats, industry best practices, and regulatory requirements to ensure the organization’s security posture remains current and effective.
• Oversee the design, implementation, and maintenance of the organization’s network infrastructure, including routers, switches, firewalls, and VPNs.
• Monitor network performance, troubleshoot issues, and implement solutions to optimize reliability, scalability, and security.
• Collaborate with cross-functional teams to plan and execute network upgrades, expansions, and migrations while minimizing disruptions to business operations.
• Develop and maintain incident response plans and procedures to effectively detect, contain, and mitigate cybersecurity incidents.
• Lead investigations into security breaches, coordinate with relevant stakeholders, and implement corrective actions to prevent future incidents.

Qualifications:

• Bachelor’s degree in information security, computer science or equivalent work experience.
• Extensive knowledge of data security, access management and information systems.
• Specific knowledge of data security standards, procedures and products.
• Knowledge of risk management and effective control procedures, project management.
• Understanding of SSO, MFA, identity lifecycle management, and privilege access management
• Experience with protocols such as SAML and OAuth, and managing entitlements/provisioning on a platform such as Sailpoint IIQ
• Strong understanding of Active Directory and cloud identity platforms
• Excellent written and verbal communication skills.
• 5-10 years’ experience managing projects, work experience in developing and reviewing policies, methodologies, and procedures for security.

Compensation Range:

Annual Salary: $128,211.00 - $152,251.00

This salary range represents the Bank’s good faith and reasonable estimate of possible compensation at the time of hire. Offer to be determined by selected applicant’s education, experience, knowledge, skills & abilities, as well as internal equity and alignment with market data.This role is also eligible to participate in the Bank’s annual incentive plan. As part of our competitive Total Rewards package, the Bank offers 11 paid holidays, 5 weeks of PTO and a work culture that values work/life balance. Most roles are eligible for our hybrid work schedule. We match 100% of the first 6% you contribute to your 401(k) and provide an additional 4% non-discretionary contribution to your 401(k) at the end of year. More information on our Total Rewards program can be found here.

At FHLB Des Moines, we work to create an inclusive culture. This enables us to effectively serve the needs of our members and help them succeed. FHLB Des Moines is proud to be an Equal Opportunity Employer. We prohibit discrimination on the basis of race, color, religion, sex (including pregnancy, sexual orientation or gender identity), national origin, age, disability, veteran status, genetic information (including family medical history), status as a parent or any other characteristic protected by federal, state or local law.