Manager of IT Security

Location:

Headquarters - Fort Wayne, IN

Level: Salaried/Manager

Division / Department:
Information Technology

Reporting to position:
Director, Infrastructure/Operations/Security

Travel:
Occasional

The Manager, IT Security is a strategic leadership role responsible for overseeing Do It Best’s information, cyber, and technology security. S/he will develop, implement and manage the company’s IT security strategies and operations. This role is vital to safeguarding the integrity, confidentiality, and availability of the organization's information assets. The position reports directly to the Director of Infrastructure/Operation/Security and works closely with other IT leaders, business unit heads and external stakeholders to ensure that IT security practices align with the organization's goals and regulatory requirements.

• Strategic Leadership and Vision:
  Develop and implement a comprehensive IT security strategy that aligns with the organization's objectives and risk tolerance. Lead the IT security team in identifying, developing, implementing, and maintaining security processes across the organization to reduce information and IT risks, respond to incidents, and limit exposure to liability in all areas of financial, physical, and personal risk. Advise the VP of IT and other senior management on security direction and resource investments to secure information assets and technologies effectively.
• Risk Management:
  
  Conduct regular risk assessments to identify vulnerabilities, assess potential impacts, and implement appropriate mitigation strategies. Develop and maintain an IT security risk management program, including frameworks for risk assessment and risk treatment plans.
• Policy Development and Compliance:
  Develop, maintain, and oversee the organization's information security policies, standards, and procedures to ensure they are up-to-date with evolving cybersecurity threats and compliance requirements. Ensure compliance with legal, regulatory, and contractual security obligations and best practices.
• Incident Management and Response:
  Lead the development and implementation of an incident response plan and breach notification process that can be executed with speed and accuracy. Oversee the investigation of security breaches and assist with disciplinary and legal matters associated with such breaches.
• Security Operations and Infrastructure:
  Oversee the operation of all IT security measures, including firewalls, anti-virus software, patch management systems, and intrusion detection/prevention systems. Evaluate and recommend new security technologies and countermeasures against threats to information assets.
• Team Leadership and Development:
  Lead, mentor, and develop the IT security team, fostering a culture of continuous improvement, collaboration, and high performance. Define clear team goals and KPIs, conducting regular reviews to ensure alignment with the organization's strategic objectives.
• Stakeholder Engagement:
  Collaborate with IT and business leaders to ensure security projects and measures are aligned with business objectives. Serve as the primary contact for external agencies and auditors regarding IT security matters.

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent.
• Minimum of 10 years of experience in a combination of IT security and IT management roles, with at least 7 years in a team leadership position.
• Minimum 5 years experience representing a company's security posture to government agencies and Board-level positions, is strongly preferred.

• Extensive knowledge of information security concepts, practices, and technologies, including risk assessment methodologies, policy formation, role-based authorization methodologies, authentication technologies, and security attack pathologies.
• Excellent understanding of national and international laws, regulations, policies, and ethics related to IT security.
• Strong…