Manager Information Security- IAM

The Manager, Information Security will manage and maintain the organization’s cybersecurity systems and infrastructure, protecting the organization’s IT systems and computer networks against cyberattacks, intrusions, malware, and various types of data breaches. This role focuses on Identity and Access Management and requires expertise in Microsoft 365.

Location:

Springfield, MO. Requires on-site work on a regular basis.

• Lead in detecting and analyzing security incidents, including attacks, breaches, and identified vulnerabilities, and remediate any security gaps in line with the security incident management procedure.
• Explore and develop a detailed understanding of external developments or emerging issues and evaluate their potential impact on, or usefulness to, the organization.
• Document complex “as is” and “to be” processes and describe the changes required to migrate to the “to be” capability to record accurately the change required.
• Provide input and assist GRC with the drafting of policies, procedures, and related guidelines within an area of expertise to meet defined key principles and ensure compliance with external requirements.
• Monitor and review performance and behaviors within area of responsibility to identify and resolve noncompliance with the organization’s policies and relevant regulatory codes and codes of conduct.
• Elicit complex business requirements using a variety of methods, such as interviews, document analysis, workshops, and workflow analysis, to express the requirements in terms of target user roles and goals.
• Communicate the actions needed to implement the function's strategy and business plan within the team; explain the relationship to the broader organization's mission, vision, and values; motivate Team Members to commit to these and to do extraordinary things to achieve local business goals.
• Support strategy formulation for digital by exploring how information technology can be used to help the organization become more responsive to customer needs and changing business requirements.
• Manage and report on the performance of a substantial, diverse team; set appropriate performance objectives for direct reports or project/account team members and hold individuals accountable for achieving them; take appropriate corrective action where necessary to ensure the achievement of team/personal objectives.
• Develop and/or deliver budget plans with guidance from senior colleagues.
• Use the organization’s formal development framework to identify the team’s individual development needs. Plan and implement actions, including continuing professional development specified by professional or regulatory institutions, to build their professional capabilities. Provide informal training or coaching to others throughout the organization in own area of expertise to enable others to improve performance and fulfill personal potential.
• Develop stakeholder engagement by identifying stakeholders; by finding out their needs, issues, and concerns; and by reacting to these needs, issues, and concerns to support the communication of business information and decisions.
• Conduct research and select relevant information to enable analysis of key themes and trends using primary data sources and business intelligence tools.
• Manage a portfolio of projects while reporting to senior colleagues.
• Develop medium- and long-term work schedules that enable the organization to achieve its business goals. Involves coordinating across multiple teams.

• Applies comprehensive knowledge / skill, acts with independence and provides guidance and training to others
• Experience and expertise within M365.
• Experience and expertise within IAM.
• Implements transaction security and computer/network virus protection.
• Maintains systems/services and information security, integrity, compliance and continuity.
• Ensures the confidentiality, integrity, and availability of information.
• Controls access to servers, systems, and computers.
• Follows confidentiality procedures, ensuring that restricted information is only shared with approved recipients, that data sharing is done so using approved/secure communication methods, and that…