IT Manager, Cyber Security Services

About the Role

Hampton Roads Transit is looking for dynamic, customer service oriented, and energetic people to become part of a committed team providing excellent and effective public transportation to the Hampton Roads region. We offer unmatched benefits and competitive wages in a stimulating and rewarding environment.

Salary Range: $109,058 - $141,775

• Utilize a risk-based approach to manage information security aspects of HRT’s operations.
• Ensure compliance with information security, privacy, and industry standards and regulations.
• Design, establish, and maintain reasonable organizational cyber security and information privacy postures.
• Implement the NIST Cybersecurity Framework within the organization to improve cyber resilience.
• Communicate, prepare for, and respond to geopolitical, international, and national cyber threats from an Agency perspective in coordination with key stakeholders.
• Ensure HRT’s systems are secure, compliant as per established regulatory frameworks, and audited as per established cadence.
• Work with CIO/CTO to define, implement, and maintain corporate information and operations technology security policies, procedures, and guidelines based on industry best practices and compliant with federal and state regulations.
• Maintain awareness of new cyber threats, vulnerabilities, and technologies.
• Conduct risk assessments to identify potential security threats and vulnerabilities.
• Monitor network activity to identify signs of intrusion or compromise.
• Provide technical support for computer networks including firewalls, operating systems, applications, patch management, and data security best practices.
• Manage HRT’s security tool suite including endpoint protection, vulnerability assessment, log aggregation, and analysis.
• Train staff on information security best practices to ensure compliance with company policies.
• Conduct audits to ensure security protocols are being followed by staff.
• Own the entire IT audit process for SOC & PCI reporting across the enterprise.
• Lead vulnerability audits, forensic investigations, and mitigation procedures.
• Respond immediately to security-related incidents, lead the response team, and provide post-event analysis.
• Evaluate new cybersecurity threats and IT trends and develop effective security controls.
• Evaluate potential security breaches, coordinate response, and recommend corrective actions.
• Monitor compliance with security policies and procedures.
• Investigate security breaches and incidents.
• Coordinate incident response activities.
• Manage security vendors and service providers.
• Play a proactive role in the procurement process from the cyber security perspective.
• Manage department budget and participate in annual capital expenditures planning exercises.
• Manage records created and received in compliance with the Hampton Roads Transit Records Management Policies and Procedures.
• Perform any other related duties as assigned.

• Bachelor’s degree in computer science, information technology, or related field.
• 10+ years of experience in IT security, including 5+ years in a management or lead role.
• Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or similar certification.
• Experience with a diverse body of technical cyber tools and software.
• In-depth knowledge of cyber security principles and best practices.
• Experience developing and implementing security policies and procedures.
• Demonstrated experience in Network Engineering.
• Project management experience.
• Certification in CompTIA Security+.
• Ability to effectively present information and respond to questions from senior management, groups of managers, clients, and internal and external customers.
• Ability to handle multiple tasks simultaneously and meet multiple deadlines.
• Excellent written and verbal communication skills.

• Strong background in Windows security management and security architecture.
• Background in application security analysis, design, and testing.
• Experience in network traffic flow monitoring and analysis tools.
• Experience with log aggregation and analysis tools.
• Experience with vulnerability assessment tools.
• Expe…