IT Manager, Cyber Security Services

Trans Dist Comm of Hampton Rds; Chesapeake (VA); On-site; USD 109,058 - 141,775; Full time

Benefits offered by this job

Competitive wages

Unmatched benefits

Professional development opportunities

Job summary

Trans Dist Comm of Hampton Rds is seeking an experienced IT Security Lead to manage information security aspects and compliance at Hampton Roads Transit. The role involves implementing the NIST Cybersecurity Framework, conducting risk assessments, and leading incident responses across a dynamic operational landscape.

The ideal candidate holds a Bachelor’s in Computer Science, boasts over 10 years of relevant experience, and is proficient in security management and incident response strategies.

Qualifications

• 10+ years of experience in IT security, including 5+ years in a management or lead role.
• Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) certification.
• Experience with diverse technical cyber tools and software.

Responsibilities

• Manage information security aspects of HRT’s operations.
• Implement the NIST Cybersecurity Framework.
• Lead vulnerability audits and forensic investigations.

Skills

IT security management

Risk assessment

Network engineering

Incident response

Communication skills

Education

Bachelor’s degree in computer science or information technology

Tools

Endpoint protection tools

Vulnerability assessment tools

Log aggregation tools

Job description

About the Role

Hampton Roads Transit is looking for dynamic, customer service oriented, and energetic people to become part of a committed team providing excellent and effective public transportation to the Hampton Roads region. We offer unmatched benefits and competitive wages in a stimulating and rewarding environment.

Salary Range: $109,058 - $141,775

Responsibilities

• Utilize a risk-based approach to manage information security aspects of HRT’s operations.
• Ensure compliance with information security, privacy, and industry standards and regulations.
• Design, establish, and maintain reasonable organizational cyber security and information privacy postures.
• Implement the NIST Cybersecurity Framework within the organization to improve cyber resilience.
• Communicate, prepare for, and respond to geopolitical, international, and national cyber threats from an Agency perspective in coordination with key stakeholders.
• Ensure HRT’s systems are secure, compliant as per established regulatory frameworks, and audited as per established cadence.
• Work with CIO/CTO to define, implement, and maintain corporate information and operations technology security policies, procedures, and guidelines based on industry best practices and compliant with federal and state regulations.
• Maintain awareness of new cyber threats, vulnerabilities, and technologies.
• Conduct risk assessments to identify potential security threats and vulnerabilities.
• Monitor network activity to identify signs of intrusion or compromise.
• Provide technical support for computer networks including firewalls, operating systems, applications, patch management, and data security best practices.
• Manage HRT’s security tool suite including endpoint protection, vulnerability assessment, log aggregation, and analysis.
• Train staff on information security best practices to ensure compliance with company policies.
• Conduct audits to ensure security protocols are being followed by staff.
• Own the entire IT audit process for SOC & PCI reporting across the enterprise.
• Lead vulnerability audits, forensic investigations, and mitigation procedures.
• Respond immediately to security-related incidents, lead the response team, and provide post-event analysis.
• Evaluate new cybersecurity threats and IT trends and develop effective security controls.
• Evaluate potential security breaches, coordinate response, and recommend corrective actions.
• Monitor compliance with security policies and procedures.
• Investigate security breaches and incidents.
• Coordinate incident response activities.
• Manage security vendors and service providers.
• Play a proactive role in the procurement process from the cyber security perspective.
• Manage department budget and participate in annual capital expenditures planning exercises.
• Manage records created and received in compliance with the Hampton Roads Transit Records Management Policies and Procedures.
• Perform any other related duties as assigned.

Qualifications

• Bachelor’s degree in computer science, information technology, or related field.
• 10+ years of experience in IT security, including 5+ years in a management or lead role.
• Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or similar certification.
• Experience with a diverse body of technical cyber tools and software.
• In-depth knowledge of cyber security principles and best practices.
• Experience developing and implementing security policies and procedures.
• Demonstrated experience in Network Engineering.
• Project management experience.
• Certification in CompTIA Security+.
• Ability to effectively present information and respond to questions from senior management, groups of managers, clients, and internal and external customers.
• Ability to handle multiple tasks simultaneously and meet multiple deadlines.
• Excellent written and verbal communication skills.

Software Knowledge and Skills

• Strong background in Windows security management and security architecture.
• Background in application security analysis, design, and testing.
• Experience in network traffic flow monitoring and analysis tools.
• Experience with log aggregation and analysis tools.
• Experience with vulnerability assessment tools.
• Experience with endpoint protection tools.
• Experience with Internet of Things / Operational Technology security.
• Experience with a diverse suite of cyber and network tools.
• Experience with physical security access control systems and video surveillance systems.

Safety Responsibility

Perform all job duties and responsibilities in a safe manner to protect one’s self, fellow employees, and the public from injury or harm. Promote safety awareness and follow safety procedures and policies. Take an active part in reporting unsafe conditions and any hazards within the workplace to their Supervisor, Manager and/or the Safety Department.

Training and Education

BS or higher in Computer Science, Information Technology Systems, or related field.

Required Experience

5-10 years in Information Technology field, 2+ years in IT Security Lead role, Leadership/ Management experience preferred.

Licenses or Certificates

Possess a valid Driver's License. Acquire a Virginia Driver's License within 60 days after the date of hire (in instances when an out of state license is not the applicant's current state of residence).

Physical Demands

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job.

Equal Opportunity Employer

HRT is proud to be an Equal Opportunity Employer. If you need reasonable accommodations to complete the HRT employment application and/or the interview, contact HRT Human Resources at [phone] or email [e-mail].