Senior Manager Cyber Security

Itron is innovating new ways for utilities and cities to manage energy and water. We create a more resourceful world to protect essential resources for today and tomorrow. Join us.

Over the last few years, Itron has been investing in and building a world-class cybersecurity team. We are now moving to the next step in our journey.

As a member of the Information Security leadership team, you will play a pivotal role in safeguarding our global enterprise. Your expertise will be crucial in managing our security operations, ensuring the protection of our information systems and assets. This role is strategically important in enabling smart cities and resourceful utilities, making a significant impact on the company's mission.

As a Senior Manager, you will lead a team of information security analysts focused on logging, monitoring, alerting, triaging incidents, responding to service desk and automated system tickets, and incident response. You will coordinate cross-functional teams to bring distinct, specific projects to completion both on time and within budget.

Responsibilities

• Lead the global Information Security Operations team.

• Collaborate with Information Security, Information Technology, Global Managed Services, and other teams as needed to design, promote, and implement information security solutions, tools, and automation for the continuous protection of our information systems and assets. 

• Help identify, define, and document the tools and processes for an in-house, virtual security operations center, including logging, monitoring, alerting, and response.

• Work with stakeholders to survey, identify, recommend, and implement best-fit solutions and lead their implementation where appropriate. Examples include but are not limited to: IDS/IPS, SIEM, HIDS, FIM, Vulnerability Scanners, Penetration Testing, and Detection.

• Ensure there are written procedures for each information security control and process and that the written procedures are followed.

• Develop and improve playbooks for responding to common user requests, security events, and security incident response.

• Work with business units on minimizing risk through activities such as system hardening, firewall rule reviews, and overall risk remediation.

• Maintain "state of industry" knowledge of information security issues, threats, and controls.

• Seek out and implement process improvement opportunities in security controls, including logging, monitoring, incident response, vulnerability management, and penetration testing.

• Travel: <25% on average (US and Europe)

Requirements

• Bachelor's degree in related field (Computer Science, Management Information Systems, or Computer Information Systems) or equivalent experience.

• Minimum 10 years work experience as an Information Security Engineer, Technology Leader, or Manager, preferably at companies with SaaS based enterprise software products.

• Minimum 5 years’ experience managing Information Security personnel, including managing remote staff in other countries.

• Understands the application of security concepts and controls across a broad scope of information technology areas, including networks, infrastructure, operations, databases, operating systems, and applications.

• Understands security/controls risk vs. business impact in decision making. Ability to work with business units in ensuring they understand unmitigated risks and tradeoffs between remediation and risk acceptance.

• Understanding of how to evaluate active risk of discovered vulnerabilities and to translate security assessments, vulnerability reports, and penetration testing reports into business risk statements and risk-prioritized actions.

• Experience and knowledge in deploying and monitoring cloud security controls.

• Understanding of deploying Artificial Intelligence to solve security operations problems and using AI to improve analysts’ capabilities.

• Ability to work extremely well under pressure while maintaining a professional image and approach.

• Team player with proven ability to work effectively with business units, IT, and Managed Services management and staff, vendors, and consultants.

• Hands-on experience in evaluating, deploying, configuring, and operating security tools and appliances.

• Current knowledge of commercial security product and service offerings in the marketplace.

• Strong problem-solving ability with the desire to take ownership of issues and follow through until resolution.

• Excellent oral and written communication skills.

• Strong working knowledge of ISO27001 certification and other inform