Sr. IT Security Manager

## Sr. IT Security Manager Apply:
Providence, Utah:
Palatine, Illinois:
Full time:
Posted Yesterday:
JR157

At Weber Blackstone, we believe the best moments happen outdoors while enjoying delicious food with your favorite people.  We lead the industry in innovation, design, and consumer delight, and we’re fueled by people who are curious, bold, and collaborative. Whether you’re a seasoned pro or exploring a new craft, we want Weber Blackstone to be the spark that ignites your next career move.

Join us on our journey to create world class products that redefine and reimagine outdoor cooking and deliver exceptional experiences for generations to come. Come be part of our BBQ!  
** Role Overview
**** About the role
** We are bringing two companies' systems, people and partners onto one secure foundation. You will run the security operations that make that work: monitoring, response, vulnerability management, identity controls and the tools behind them.

You will work closely with the Sr. Director, IT Security & Infrastructure, who sets strategy and owns executive reporting, and turn that strategy into working controls. This is a hands-on role: you will lead the team and still investigate alerts, tune tools and run incidents yourself.  
** What you'll do*
* ** Security operations and incident response*
* • Manage daily detection and response, working with our managed security partner (MDR/MSSP) and escalating as needed.
• Triage and investigate alerts from EDR, SIEM, email security and cloud tools; tune rules to cut noise.
• Lead incident response for most incidents, and support the Sr. Director on major ones; keep playbooks current.
• Run tabletop exercises and post-incident reviews, and track follow-up actions to closure.  
** Vulnerability and infrastructure security*
* • Run vulnerability scanning and patch tracking across servers, endpoints, network and cloud, with clear remediation SLAs.
• Coordinate penetration tests and verify fixes.
• Maintain secure configuration baselines for endpoints, servers, firewalls and cloud accounts.
• Partner with Operations on basic protections for plant and warehouse systems (OT).  
** Identity and access*
* • Administer SSO, MFA and privileged access controls, and help unify identity across the Weber and Blackstone environments.
• Run quarterly access reviews and improve joiner–mover–leaver processes with HR and IT.  
** Risk and compliance support*
* • Gather evidence and remediate findings for PCI DSS, IT general controls and other audits.
• Complete security reviews of new vendors and SaaS tools against our third-party risk standard.
• Keep security policies and procedures up to date, and propose changes to the Sr. Director.
• Produce monthly security metrics: open vulnerabilities, incidents, patch compliance and phishing results.  
** Team and awareness*
* • Lead, coach and schedule a team of 2-3 security engineers and analysts, including on-call coverage.
• Run security awareness training and phishing simulations for offices, plants and distribution centers.
• Be the go-to security contact for IT, Engineering and business teams on day-to-day questions.  
** What you bring*
* • 6+ years in IT security or security-focused infrastructure roles, including 3+ years leading people, a team or major projects.
• Bachelor's degree in computer science, information systems or a related field, or equivalent experience.
• Hands-on experience with EDR, SIEM and email security tools, and with investigating and containing real incidents.
• Working knowledge of identity and access management: SSO, MFA, Active Directory or Entra , and privileged access.
• Experience running a vulnerability management program with scanning tools and patch tracking.
• Familiarity with security frameworks such as NIST…