Senior Manager, IT Security Operations

• Partner with the CTO, Senior Director of IT, and vCISO to assess and respond to security incidents
• Monitor, investigate, analyze, document, and remediate security alerts and incidents
• Evaluate, procure, administer, and manage security tools and vendor services
• Monitor, update, and fine-tune security systems
• Lead the vendor security review process with the vCISO
• Develop, implement, review, and enforce security policies, standards, and procedures guided by ISO 27000
• Ensure compliance with regulations and standards and coordinate regular audits
• Administer identity provider systems, user accounts, permissions, and access levels
• Maintain role-mapping documentation and coordinate entitlement reviews
• Implement and manage MFA and SSO solutions
• Oversee vulnerability scans and penetration tests and coordinate remediation
• Curate and oversee the employee security awareness program and portal
• Provide security hygiene training and oversee phishing testing and remediation training
• Maintain incident reports, policies, procedures, configurations, and other security documentation
• Collaborate with cross-functional teams and communicate security risks and recommendations
• Facilitate the IT Security Operations working group and participate in Architectural Review Board meetings
• Assist cloud and network administration teams with server, network-device, firewall, routing, and ACL configurations
• Maintain and foster a culture of safety
• Perform other job-related duties as assigned

• Bachelor's degree in Information Security, Computer Science, or a related field
• Minimum 8 years of experience with IT operations and progressive cybersecurity experience in a corporate or non-profit environment
• Equivalent combination of education and work experience will also be considered
• Strong knowledge of cybersecurity technologies and best practices
• Proficiency administering security tools and systems
• Experience with Defender for Endpoint and Defender for Identity preferred
• Experience with Okta preferred
• Experience with Sonicwall firewall hardware preferred
• Experience with distributed network environments preferred
• AWS, Azure, or public cloud expertise preferred
• Experience with Sec Dev Ops  best practices preferred
• Excellent problem-solving and analytical skills
• Effective communication and interpersonal abilities
• Detail-oriented with a focus on accuracy
• Ability to work independently and collaboratively
• Commitment to Audubon's organizational values
• Experience fostering inclusive and collaborative work environments valued

Demonstrates expertise in cybersecurity technologies, incident response, and security policy enforcement, with a strong focus on compliance and risk management. Proficient in administering security tools and systems, including identity management and multi-factor authentication solutions.

• Cybersecurity Technologies
• Incident Response
• Security Policy Enforcement Identity Management
• Multi-Factor Authentication

• Information Security
• Cybersecurity Best Practices
• Security Tools Administration
• Vulnerability Scanning
• Penetration Testing
• AWS Expertise
• Azure Expertise
• Sec Dev Ops  Best Practices
• Defender for Endpoint
• Defender for Identity

• Problem-Solving
• Analytical Skills
• Effective Communication
• Interpersonal Abilities
• Detail-Oriented

• ISO 27000
• Compliance
• Security Audits
• Cross-Functional Collaboration
• Employee Security Awareness

• Okta
• Sonicwall Firewall
• Identity Provider Systems
• MFA Solutions
• SSO Solutions