Senior Manager, IT Security Operations

National Audubon Society; Washington (Washington County); Hybrid; USD 123,000 - 138,000; Full time

Job summary

National Audubon Society is seeking a Senior Manager, IT Security Operations to safeguard our assets and ensure the integrity of sensitive information across systems and networks.

This hybrid role requires partnering with leadership, overseeing security tools, policies, IAM, vulnerability management, and awareness programs, with offices nationwide and remote options per policy. You will lead cross-functional teams and drive continual security improvements.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field.
• 8+ years of IT security operations experience with progressive cybersecurity exposure.
• Strong knowledge of cybersecurity technologies and best practices.
• Experience administering security tools and systems.
• Excellent problem-solving, analytical, and communication skills.
• Ability to work independently and within a team.
• Experience with Defender for Endpoint/Identity and Okta preferred.

Responsibilities

• Lead IT Security Operations and incident response efforts.
• Oversee security tool procurement, administration, and vendor services.
• Develop and enforce security policies in line with ISO 27000.
• Administer IdP, IAM, MFA, and SSO workflows.
• Coordinate vulnerability scans and remediation activities.
• Deliver security awareness training and phishing programs.
• Maintain security documentation and governance artifacts.
• Collaborate with cross-functional teams and communicate risks to leadership.
• Support cloud and network configurations to strengthen security posture.

Skills

Incident Response

Security Tools

Policy Compliance

IAM MFA

Vulnerability Management

Security Awareness

Team Collaboration

Education

Bachelor's degree in Information Security

Tools

Okta

SonicWall

Defender for Endpoint

Defender for Identity

AWS/Azure

SecDevOps

Job description

Location: Washington, DC | New York, NY

Full time

Requisition ID: JR1195

About Audubon

The National Audubon Society is a leading nonprofit conservation organization with 120 years of science-based, community-driven impact, dedicated to protecting birds and the places they need, today and tomorrow. Birds are powerful indicators of our planet's health, acting as sentinels that warn us of environmental change and inspire action. Audubon works across the Western Hemisphere, driven by the understanding that what is good for birds is good for the planet. Through a collaborative, bipartisan approach across habitats, borders, and the political spectrum, Audubon drives meaningful and lasting conservation outcomes. With 800 staff and over 1.9 million supporters, Audubon is a dynamic and ever-growing force committed to ensuring a better planet for both birds and people for generations to come. Learn more at www.audubon.org and on Facebook, Twitter and Instagram @audubonsociety.

Position Summary

We are seeking a highly skilled and motivated Senior Manager, IT Security Operations to join our team. As the Senior Manager, IT Security Operations, you will play a crucial role in safeguarding our organization's assets, ensuring the integrity and confidentiality of sensitive information, and maintaining the overall security posture of our systems and networks.

This position is classified as hybrid preferred. Hybrid employees are expected to work in an Audubon office every Monday and Tuesday and an additional two days each month of the employee's choosing. Remote work within the United States may be considered only for candidates not within commuting distance of an Audubon office, in accordance with Audubon's "Where We Work" Policy. Audubon offices include locations in:

Albuquerque, NM; Albany, NY; Anchorage, AK; Baltimore, MD; Charleston, SC; Chicago, IL; Columbia, SC; Fargo, ND; Fort Collins, CO; Lincoln, NE; Miami, FL; New Orleans, LA; New York, NY; Oakland, CA; Palm Desert, CA; Roseville, MN; Sacramento, CA; Salt Lake City, UT; Tallahassee, FL; and Washington, DC.

Compensation

• $109,372 - $123,044 / year = Albuquerque, NM; Charleston, SC; Columbia, SC; Fargo, ND; Fort Collins, CO; Lincoln, NE; Miami, FL; New Orleans, LA; Salt Lake City, UT; Tallahassee, FL
• $123,041 - $138,421 / year = Albany, NY; Anchorage, AK; Baltimore, MD; Chicago, IL; Palm Desert, CA; Roseville, MN; Sacramento, CA; Washington, DC
• $136,718 - $155,808 / year = New York, NY; Oakland, CA

Essential Functions

• Security Incident Response
  • Partner with Chief Technology Officer, Senior Director of Information Technology, and Virtual Chief Information Security Officer (vCISO) to assess and respond to security incidents.
  • Monitor and respond to security alerts and incidents compliant with service level agreements outlined by policy.
  • Investigate, analyze, and document security incidents compliant with "chain of custody" processes, and implement appropriate countermeasures.
• Security Tool and Services Management
  • Evaluate, procure, administer, and manage security tools and supporting vendor services, including but not limited to password managers, phishing threat management, firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint management, endpoint detection and response (EDR), managed detection and response (MDR), antivirus, document management, and Security Information and Event Management (SIEM) solutions.
  • Regularly monitor, update, and fine-tune security systems to enhance effectiveness.
  • Lead vendor security review process in partnership with vCISO.
• Security Policy and Compliance
  • Assist in the development, implementation, review, and enforcement of security policies, standards, and procedures guided by ISO 27000 standards.
  • Ensure compliance with industry-specific regulations (e.g., PCI) and standards and coordinate and participate in regular audits.
• Access Control and Authentication
  • Administer Identity Provider (IdP) to manage user accounts, permissions, and access levels across various systems, following Identity and Access Management (IAM) workflows.
  • Maintain system role mapping documentation and lead and coordinate regular entitlement reviews as necessary.
  • Implement, administer, and manage multi-factor authentication (MFA) and single sign-on (SSO) solutions.
• Vulnerability Management
  • Oversee scheduled vulnerability scans and penetration tests.
  • Coordinate with relevant teams to remediate identified vulnerabilities.
• Security Awareness and Training
  • Curate and oversee security awareness program and portal for employees.
  • Provide specialized training on best practices for security hygiene.
  • Oversee phishing test program and remediation training program.
• Security Documentation
  • Maintain accurate and up-to-date security documentation, including incident reports, policies, procedures, and configurations.
• Collaboration and Communication
  • Collaborate with cross-functional teams to ensure security measures align with overall business objectives.
  • Communicate security risks and recommendations to management and relevant stakeholders.
  • Act as lead facilitator of IT Security Operations working group and participate in Architectural Review Board meetings.
• Server and Network Configuration
  • Assist cloud and network administration team with configurations and function of servers to limit access, mitigate intrusions, and protect assets.
  • Assist cloud and network administration team with configurations and topology of network devices to safeguard points of access and data security, including firewalls, routing, and ACLs.
• Maintain and foster culture of safety.
• Other job-related duties as assigned.

Qualifications and Experience

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Minimum 8 years of experience with IT operations with progressive experience in cybersecurity in a corporate or non-profit environment. An equivalent combination of education and work experience will also be considered.
• Strong knowledge of cybersecurity technologies and best practices.
• Proficiency in administering security tools and systems.
• Excellent problem-solving and analytical skills.
• Effective communication and interpersonal abilities.
• Detail-oriented with a focus on accuracy.
• Ability to work both independently and collaboratively in a team environment.
• Experience with Defender for Endpoint, and Defender for Identity preferred.
• Experience with Okta preferred.
• Experience with Sonicwall FW hardware preferred.
• Experience with distributed network environments preferred.
• AWS / Azure / Public cloud expertise preferred.
• Experience with SecDevOps best practices preferred.
• Commitment to Audubon's organizational values...