InfoSec Leader: Risk, Policy & Incident Response

LaBella Associates; United States; On-site; USD 105,000 - 125,000; Full time

Benefits offered by this job

Health Insurance

401k Plan

Paid Time Off

Tuition Reimbursement

Leadership Development Program

Job summary

LaBella Associates is seeking an Information Security Manager to lead the security program from our Rochester, NY office. You will supervise cybersecurity engineers, analysts, and GRC staff, and own policy development, risk management, and incident response across the organization.

You will coordinate with IT leadership to ensure security controls, governance, and compliance align with business goals and regulatory requirements. A CISSP/CISM is preferred with a strong leadership background.

Qualifications

• Bachelor’s degree or higher in Cybersecurity, Information Technology, or a related field.
• CISSP, CISM, or similar certification required/strongly preferred.
• Proven experience in IT security, network administration, and managing security teams.

Responsibilities

• Lead and mentor security team including engineers, analysts, and GRC personnel.
• Develop and enforce security policies, standards, and procedures.
• Identify vulnerabilities and conduct threat assessments; advise senior management on risk.
• Oversee security monitoring, incident response, and compliance activities.
• Coordinate with IT leadership to align cybersecurity with IT goals.

Skills

Leadership

Risk management

Incident response

Security governance

Policy development

Communication

Education

Bachelor’s degree or higher in Cybersecurity / IT

Tools

CISSP

CISM

Job description

LaBella Associates is seeking an Information Security Manager to lead the security program from our Rochester, NY office. You will supervise cybersecurity engineers, analysts, and GRC staff, and own policy development, risk management, and incident response across the organization.

You will coordinate with IT leadership to ensure security controls, governance, and compliance align with business goals and regulatory requirements. A CISSP/CISM is preferred with a strong leadership background.