IT Security Manager

True North Consulting, LLC; Olathe (KS); On-site; USD 90,000 - 120,000; Full time

Job summary

True North Consulting, LLC is seeking an Information Security Manager to build a team and support the security vision of its business unit. The role involves managing information security practices, overseeing security solutions, and engaging with affiliate companies to mitigate cybersecurity risks.

Key qualifications include a relevant degree, extensive experience in Information Security, and knowledge of compliance standards such as CIS and ISO. The position requires approximately 35% travel and offers a significant opportunity to influence organizational security direction.

Qualifications

• Must have 5+ years of overall Information Security experience.
• Open to travel approximately 35% of the time.
• Preferably have an Information Security industry certification.

Responsibilities

• Communicates Information Security goals throughout the organization.
• Establishes appropriate Information Security procedures and governance.
• Manages relationships with vendors performing managed security services.

Skills

Information Security experience

Risk Management

Compliance knowledge

Data Loss Prevention (DLP)

Encryption technologies

Network security

Education

Bachelor's degree in MIS, CIS, Business Management or related field

Tools

CIS Critical Security Controls

ISO 27000-series standards

NIST SP800‑53

SIEM systems

Governance, Risk, and Compliance (GRC) systems

Job description

Job Description

This is the perfect role to really put your mark on something. This is a newly created position, tasked with building a team to support the security vision of an entire business unit.

Key Responsibilities

• Communicates Information Security goals and new programmes effectively within the organization
• Ensures consistent and effective security practices
• Establishes appropriate Information Security procedures and governance
• Oversees the deployment, integration, and initial configuration of all new Information Security solutions and Information Security policies, standards, and operational procedures
• Manages investigations into identified problematic activity and provides on‑going communication with IT senior management
• Owns and manages relationships with vendors performing managed security services for the Overseas & Trading division
• Provides centralised guidance and governance of Information Security solutions
• Engages in ongoing communications with peers in the Infrastructure and Application Support groups as well as the business groups to ensure understanding of security goals
• Collaborates with affiliate companies to assist with identifying and managing Cybersecurity risk
• Assist with Information Security awareness programmes
• Creates and maintains a set of metrics to document and measure the performance and effectiveness of the Information Security programme; responsible for communicating metrics to the Overseas & Trading senior management
• Participates in annual and long‑range planning activities to ensure Information Security needs are addressed

Qualifications

• Must be open to travel approximately 35% of the time.
• A college degree in MIS, CIS, Business Management, or related field
• 5+ years of overall Information Security experience
• 1+ years working on an Information Security implementation team
• An Information Security industry certification is preferred
• Progressive experience in a combination of Information Technology, Risk Management, Information Security, and Compliance roles is preferred
• Must have a working knowledge of at least one of the following regulatory compliance requirements and IT management frameworks:
  • CIS Critical Security Controls
  • ISO 27000‑series standards
  • NIST SP800‑53 and related standards
• Must have a working knowledge of the following Information Security practices, standards, and systems:
  • Data Loss Prevention (DLP) systems
  • Encryption technologies and standards
  • Endpoint security software
  • Governance, Risk, and Compliance (GRC) systems
  • Identity and Access Management (IAM)
  • Incident response practices
  • Network security (e.g. firewalls, IDS/IPS, VPN, etc.)
  • Risk assessment practices
  • Security Information Event Management (SIEM) systems
  • Vulnerability management practices and scanning tools