Network Security Manager

About Herring Bank

Herring Bank is a dynamic financial institution with an unwavering commitment to serving our customers while ensuring the highest level of security for their financial assets. As a leading bank, we take pride in seamlessly merging traditional banking values with cutting-edge cybersecurity practices.

As a Network Security Manager at Herring Bank, you will play a pivotal role in fortifying our organization's cybersecurity defenses, with a strong emphasis on owning and optimizing patch management processes. The ideal candidate will possess a unique blend of technical expertise, hands-on experience in cybersecurity management—including deep knowledge of patch management tools and practices—and strong leadership skills. You will be responsible for driving proactive vulnerability exploration and remediation, ensuring compliance with industry standards, leading incident response efforts, and maintaining meticulous documentation throughout all processes to support auditability and continuous improvement.

While experience with Fortinet Firewalls is valued, it is not a critical requirement, as we already have dedicated expertise in this area.

• Cybersecurity Infrastructure Management
• Oversee and manage the bank's cybersecurity infrastructure, including Crowd Strike endpoint security, ensuring optimal performance and security posture.
• Support existing Fortinet Firewall operations, leveraging prior experience to assist as needed, though primary responsibilities lie elsewhere.
• Implement, configure, and manage Linux, AWS, and Azure environments as part of the cybersecurity infrastructure.
• Utilize Microsoft Power Shell for automation, scripting, and management of cybersecurity tasks and processes.
• Develop and maintain an advanced understanding of network protocols to enhance security measures and incident response capabilities.

• Patch Management and Vulnerability Remediation
• Take full ownership of patch management across the organization's systems, endpoints, and infrastructure, proactively exploring vulnerabilities, seeking out detailed reports, implementing corrections, and ensuring timely remediation to minimize risks.
• Demonstrate expertise in utilizing patch management and vulnerability assessment tools such as Red Hat Satellite, Azure Arc, Manage Engine Endpoint Central, Qualys, and similar platforms to automate deployments, scan for vulnerabilities, and maintain a secure environment.
• Foster a culture of continuous improvement in patch management by regularly reviewing processes, identifying gaps, and documenting all activities with a high level of detail, including vulnerability assessments, patch application logs, remediation steps, and post-implementation verifications.

• Compliance and Reporting
• Ensure compliance with industry-standard security frameworks such as NIST and ISO 27001, incorporating patch management best practices into compliance strategies.
• Prepare comprehensive compliance reports for internal and external stakeholders, including detailed documentation on vulnerability and patch management activities.
• Identify and address compliance gaps and vulnerabilities, with a focus on integrating patch-related remediation into broader security initiatives.

• Incident Response
• Lead incident response efforts in the event of a cybersecurity breach, prioritizing vulnerabilities that could be addressed through patching.
• Collaborate with the incident response team to contain and remediate security incidents, leveraging patch management tools for rapid fixes.
• Conduct post-incident reviews to enhance the bank's security posture, with emphasis on lessons learned related to patch management and documentation.

• Bachelor's degree in Cybersecurity, Information Technology, or equivalent, or 2 additional years of experience in a related field.
• Minimum of 5 years of experience in cybersecurity management, with a strong focus on patch management processes and Crowd Strike administration.
• Proven experience as a Linux, AWS, and Azure administrator, demonstrating a strong command of cloud security practices, including patch deployment in these environments.
• Hands-on experience…