Sr. IT Security Manager

Weber Blackstone

Palatine (IL)

In loco

USD 150.000 - 165.000

Tempo pieno

11 giorni fa

Aumenta le possibilità di ricevere una risposta da questo datore di lavoro

Il tuo curriculum e una lettera di presentazione personalizzati, che corrispondono esattamente a ciò che sta cercando.

Supera i filtri ATS

Vantaggi offerti da questo lavoro

Medical, dental, and vision coverage

Life and disability insurance

Employee Assistance Program (EAP)

401(k) with company match

Paid time off (vacation, sick, holiday

Descrizione del lavoro

Weber Blackstone, a leader in outdoor cooking products, seeks a senior IT security leader to run security operations across dual environments. You’ll manage detection, response, vulnerability management, identity controls, and incident response, while translating strategy into practical controls and playbooks.

You will lead a 2-3 person security team, collaborate with HR and IT, coordinate audits (PCI DSS/ITGC), and drive security metrics to reduce risk across on-prem and cloud platforms.

Competenze

6+ years in IT security roles, with 3+ years leading people or projects.
Bachelor’s degree in CS or related field, or equivalent experience.
Hands-on with EDR, SIEM, and email security tools; incident containment.
Experience with IAM: SSO, MFA, AD/Entra ID, privileged access.
Knowledge of NIST CSF or CIS Controls and PCI IT audits.
Experience with MSPs and vendor SLAs.
Clear writer and communicator to explain risk.

Mansioni

Security operations, monitoring and response with MDR/MSSP partner.
Triage alerts from EDR, SIEM, email security and cloud tools; tune rules.
Lead incident response for most incidents; maintain playbooks.
Run tabletop exercises and post-incident reviews; track actions to closure.
Vulnerability scanning and patch tracking across servers, endpoints, network and cloud.
Coordinate pen tests and verify fixes.
Maintain secure configuration baselines for endpoints, servers, firewalls, cloud.
Administer SSO, MFA and privileged access; unify identity across environments.
Run quarterly access reviews; improve joiner/mover/leaver processes with HR/IT.
Support PCI DSS IT audits and third-party risk reviews; update security policies.

Conoscenze

Team leadership

IT security

Incident response

Risk communication

Vulnerability management

Security policy & compliance

Formazione

Bachelor’s degree in computer science or information systems

Strumenti

CrowdStrike Falcon

Microsoft Defender

Splunk

Microsoft 365 security

Descrizione del lavoro

At Weber Blackstone, we believe the best moments happen outdoors while enjoying delicious food with your favorite people. We lead the industry in innovation, design, and consumer delight, and we’re fueled by people who are curious, bold, and collaborative. Whether you’re a seasoned pro or exploring a new craft, we want Weber Blackstone to be the spark that ignites your next career move. Join us on our journey to create world class products that redefine and reimagine outdoor cooking and deliver exceptional experiences for generations to come. Come be part of our BBQ!

Role Overview

About the role

We are bringing two companies’ systems, people and partners onto one secure foundation. You will run the security operations that make that work: monitoring, response, vulnerability management, identity controls and the tools behind them.

You will work closely with the Sr. Director, IT Security & Infrastructure, who sets strategy and owns executive reporting, and turn that strategy into working controls. This is a hands-on role: you will lead the team and still investigate alerts, tune tools and run incidents yourself.

What you’ll do

Security operations and incident response

Manage daily detection and response, working with our managed security partner (MDR/MSSP) and escalating as needed.
Triage and investigate alerts from EDR, SIEM, email security and cloud tools; tune rules to cut noise.
Lead incident response for most incidents, and support the Sr. Director on major ones; keep playbooks current.
Run tabletop exercises and post-incident reviews, and track follow-up actions to closure.

Vulnerability and infrastructure security

Run vulnerability scanning and patch tracking across servers, endpoints, network and cloud, with clear remediation SLAs.
Coordinate penetration tests and verify fixes.
Maintain secure configuration baselines for endpoints, servers, firewalls and cloud accounts.
Partner with Operations on basic protections for plant and warehouse systems (OT).

Identity and access

Administer SSO, MFA and privileged access controls, and help unify identity across the Weber and Blackstone environments.
Run quarterly access reviews and improve joiner–mover–leaver processes with HR and IT.

Risk and compliance support

Gather evidence and remediate findings for PCI DSS, IT general controls and other audits.
Complete security reviews of new vendors and SaaS tools against our third‑party risk standard.
Keep security policies and procedures up to date, and propose changes to the Sr. Director.
Produce monthly security metrics: open vulnerabilities, incidents, patch compliance and phishing results.

Team and awareness

Lead, coach and schedule a team of 2-3 security engineers and analysts, including on-call coverage.
Run security awareness training and phishing simulations for offices, plants and distribution centers.
Be the go-to security contact for IT, Engineering and business teams on day‑to‑day questions.

What you bring

6+ years in IT security or security‑focused infrastructure roles, including 3+ years leading people, a team or major projects.
Bachelor’s degree in computer science, information systems or a related field, or equivalent experience.
Hands‑on experience with EDR, SIEM and email security tools, and with investigating and containing real incidents.
Working knowledge of identity and access management: SSO, MFA, Active Directory or Entra ID, and privileged access.
Experience running a vulnerability management program with scanning tools and patch tracking.
Familiarity with security frameworks such as NIST CSF or CIS Controls, and with supporting PCI DSS or IT audits.
Experience working with managed security providers and holding them to service levels.
Clear writer and communicator who can explain risk to non‑technical colleagues.

Nice to have

Experience during a merger or acquisition, especially consolidating tools and identities across two IT environments.
Experience in consumer products, manufacturing or retail, including exposure to OT or plant networks.
Hands‑on experience with CrowdStrike Falcon, Microsoft Defender, Splunk or similar platforms, and with Microsoft 365 or Google Workspace security.
Cloud security experience in AWS, Azure or GCP.
Scripting or automation skills (PowerShell, Python) for investigations and routine security tasks.
Certifications such as CISSP

Benefits: