IT Security Manager-Irving, TX - Georgia IT Inc.
Irving, TX
About the Job
IT Security Manager
Location – Irving, TX
Duration – 4 – 6 months – CTH
The IT Security Manager will be responsible for the coordination, oversight, and activities of key information technology security projects focused on reducing risks and limiting liability to the enterprise. The role will have direct influence on implementation of new programs, helping to define the information security practices of tomorrow. The role will be responsible for the management of our Security Operations Center and will work directly with department heads. The role will use communication skills to work with each department on a variety of security related projects to create secure processes, policies. The role will need a proficient understanding of PCI DSS and general Information security concepts. The role will use time and project management skills to manage the team to meet goals and deadlines for all assign tasks and projects and regularly report on all progress.
Essential Responsibilities of the Position:
• Manage offshore security team supporting diverse set of goals including PCI and SOX compliance
• Serve as independent SME for enterprise projects
• Develop, advocate and communicate policies, standards and procedures related to Information Security
• Apply security best practices and technologies to current and future projects
• Manage the implementation of enterprise security projects and controls
• Manage and reports on investigation of intrusion incidents, forensic investigations, and incident response
• Conduct audit of security controls across the enterprise
• Maintain industry knowledge and be aware of current trends and threats related to information security and compliance
• Partner with all IT teams on security-related projects and topics
• Serve as security technical SME for security related incidents
• Support Internal Audit as well as our External Audit firm as necessary to conduct regular audits
• Oversee security monitoring program ensuring critical daily tasks and processes are maintained and improved as required.
• Maintain enterprise IT security and network management program.
• Assess and communicate any and all security risks associated with any and all purchases or practices performed by the company.
• Strong hands-on experience deploying and managing security and network solutions such as (SIEM, FireEye, Email Security, Endpoint, DLP, IPS/IDS, etc.)
Required Skills and Experience:
• Bachelor's degree in Computer Science, Information Systems or related field
• 7+ years of experience working within information security programs focused on compliance with policies, procedures, and industry regulations
• 5+ years of management/supervisory experience including managing an offshore team
• Clear understanding of financial and payment card processing industries and the Payment Card Industry Data Security Standards (PCI DSS)
• Deep understanding of information systems and security infrastructure
• Strong communication skills, both verbal and written, with the ability to explain complex concepts to a diverse audience (leadership, management, end users and vendors alike)
• Demonstrate creative thinking, problem solving skills, and risk analysis
• Basic project management skills with the ability to organize activities, manage task, and report status effectively
• Experience in incident response, penetration testing and vulnerability management
• One or more industry certifications to include CISSP, CISA, CISM, CRISC, GCIA, PCI QSA, or PCI ISA
• Self-motivated with the ability to work independently and within complex teams
• Ability and willingness to adapt and learn new skills quickly
• Possess a flexible, proactive, can-do attitude
• Able to travel internationally
Location – Irving, TX
Duration – 4 – 6 months – CTH
The IT Security Manager will be responsible for the coordination, oversight, and activities of key information technology security projects focused on reducing risks and limiting liability to the enterprise. The role will have direct influence on implementation of new programs, helping to define the information security practices of tomorrow. The role will be responsible for the management of our Security Operations Center and will work directly with department heads. The role will use communication skills to work with each department on a variety of security related projects to create secure processes, policies. The role will need a proficient understanding of PCI DSS and general Information security concepts. The role will use time and project management skills to manage the team to meet goals and deadlines for all assign tasks and projects and regularly report on all progress.
Essential Responsibilities of the Position:
• Manage offshore security team supporting diverse set of goals including PCI and SOX compliance
• Serve as independent SME for enterprise projects
• Develop, advocate and communicate policies, standards and procedures related to Information Security
• Apply security best practices and technologies to current and future projects
• Manage the implementation of enterprise security projects and controls
• Manage and reports on investigation of intrusion incidents, forensic investigations, and incident response
• Conduct audit of security controls across the enterprise
• Maintain industry knowledge and be aware of current trends and threats related to information security and compliance
• Partner with all IT teams on security-related projects and topics
• Serve as security technical SME for security related incidents
• Support Internal Audit as well as our External Audit firm as necessary to conduct regular audits
• Oversee security monitoring program ensuring critical daily tasks and processes are maintained and improved as required.
• Maintain enterprise IT security and network management program.
• Assess and communicate any and all security risks associated with any and all purchases or practices performed by the company.
• Strong hands-on experience deploying and managing security and network solutions such as (SIEM, FireEye, Email Security, Endpoint, DLP, IPS/IDS, etc.)
Required Skills and Experience:
• Bachelor's degree in Computer Science, Information Systems or related field
• 7+ years of experience working within information security programs focused on compliance with policies, procedures, and industry regulations
• 5+ years of management/supervisory experience including managing an offshore team
• Clear understanding of financial and payment card processing industries and the Payment Card Industry Data Security Standards (PCI DSS)
• Deep understanding of information systems and security infrastructure
• Strong communication skills, both verbal and written, with the ability to explain complex concepts to a diverse audience (leadership, management, end users and vendors alike)
• Demonstrate creative thinking, problem solving skills, and risk analysis
• Basic project management skills with the ability to organize activities, manage task, and report status effectively
• Experience in incident response, penetration testing and vulnerability management
• One or more industry certifications to include CISSP, CISA, CISM, CRISC, GCIA, PCI QSA, or PCI ISA
• Self-motivated with the ability to work independently and within complex teams
• Ability and willingness to adapt and learn new skills quickly
• Possess a flexible, proactive, can-do attitude
• Able to travel internationally
Source : Georgia IT Inc.