Information Security Manager – Strategy & Risk

Labella-Associates; City of Rochester (NY); On-site; USD 105,000 - 125,000; Full time

Benefits offered by this job

Health/Dental Insurance

401k Plan with Employer Match

Paid Parental Leave

Tuition Reimbursement

Wellness Program

Profit Sharing

Job summary

LaBella Associates in Rochester, NY is seeking an Information Security Manager to lead and administer security across the organization, including personnel, vendors, and risk management, ensuring a secure workplace through preventive measures and policy adherence.

Responsibilities include supervising the security team, developing security policies, overseeing compliance with regulatory requirements, conducting risk assessments, incident response, vendor security, and staff training.

Qualifications

• Bachelor’s degree or higher in Cybersecurity, Information Technology, or a related field.
• Certifications: CISSP, CISM, or similar.
• Proven experience in IT security, network administration, and managing security teams.
• Strong leadership and communication skills.
• Knowledge of network infrastructure, security tools, risk management, and compliance frameworks.

Responsibilities

• Lead, supervise, train, and mentor security team including cybersecurity engineers and analysts.
• Develop and enforce security policies, standards, and procedures.
• Oversee policy standards and implementation strategies for cybersecurity compliance.
• Identify vulnerabilities, conduct threat assessments, and implement mitigation strategies.
• Advise senior management on risk levels and security posture.
• Lead incident response to security breaches and cyberattacks.
• Ensure regulatory compliance and conduct security awareness training.
• Manage third-party vendor security and procurement inputs.

Skills

Team leadership

Cybersecurity

Risk management

Incident response

Communication skills

Education

Bachelor's degree or higher in Cybersecurity/Information Technology

Job description

LaBella Associates in Rochester, NY is seeking an Information Security Manager to lead and administer security across the organization, including personnel, vendors, and risk management, ensuring a secure workplace through preventive measures and policy adherence.

Responsibilities include supervising the security team, developing security policies, overseeing compliance with regulatory requirements, conducting risk assessments, incident response, vendor security, and staff training.