IT Security Manager

Work Location: Washington, DC (3 days onsite/2 days remote)

Status: Exempt

• Collect and maintain data needed to meet system cybersecurity reporting
• Ensure daily report and any other cyber or system security reporting deadlines are met
• Escalate or oversee the escalation of cybersecurity issues in accordance with organizational policy
• Ensure cybersecurity procedures and best practices are properly documented, formatted, and disseminated using standard operating procedure templates
• Ensure cybersecurity requirements are integrated into the continuity planning for the system(s) and/or organization(s)
• Evaluate and execute security tool development efforts to ensure that baseline security safeguards are appropriately installed
• Manage the monitoring of information security data sources to maintain organizational situational awareness
• Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc
• Responsible for managing a team of security personnel, advising senior leadership of threats to security, and proposing changes to the company’s policies to reduce the organization’s risk
• Exhibit technical skill in configuring and maintaining cybersecurity tools
• Oversee ongoing operations of security assets to ensure that a defense in depth security model is in place
• Ability to review logs for unusual or suspicious activity, interpret and make recommendations for resolution
• Ability to recommend and coordinate with engineering and operations personnel any security patches, disaster recovery procedures, and any other measures required in the event of a security breach
• Collect meaningful metrics and key performance indicators for reporting cybersecurity threats and trends
• Produce communications both oral and written to a variety of audiences. Effectively interact on business or technical matters and convey complex and/or critical material in an easy-to-understand style and manner
• Problem solving. Assure timely resolution of operational problems by utilizing effective problem management techniques. Display the highest level of critical thinking; making timely and sound decisions; reach decisions under conditions of uncertainty
• On-call security support as needed
• Perform related job duties as assigned

• Minimum of 10 years IT experience, with at least 5 years in an information security role and at least 3 years of management/supervisory experience
• Active CISSP or CISM certification
• BS in Cybersecurity or related field
• A strong understanding of the business impact of security tools, technologies, and policies
• Excellent customer service with an ability to “translate” security and technical terminology so the customer can understand
• Analytical skills, and high-level problem-solving skills that allow for effective and efficient resolution to many complex information security issues
• Experience managing a team of information system security professionals or information technology professionals
• Experience managing work through a ticketing system
• Ability to create dashboards, generate reports and manipulate data in Big Fix, Splunk, Tenable, and Crowdstrike
• Ability to document processes and procedures for utilization of security tools and train others in their use
• Familiarity with NIST 800-53 and other federal regulatory cybersecurity guidelines
• Excellent communication skills and the ability to articulate cybersecurity posture as well as security team accomplishments, challenges, and forecasted work for upper management
• You must be available to work onsite as required by job

We do not discriminate on the basis of any protected group status under applicable law.