Information Systems Security Manager

Company Description

Who is Pyrotek? Pyrotek is the most successful global industrial company you’ve never heard of (until now). Pyrotek is a global leader in high temperature materials and our products impact virtually everyone in the developed world. Our global team has worked for decades to deliver new technologies, advanced engineered systems and innovative materials to customers in industries all over the world. Join our team and create, improve and innovate the everyday!

Job Description

The IS Security Manager will protect Pyrotek’s Information System (IS) infrastructure and data from unauthorized access by monitoring networks, databases, computer systems and processes. Create and implement proactive measures to implement and maintain IS Security, assess risk, and respond to security threats.

This is a hybrid role that will seat in our downtown Spokane Corporate Headquarters.  

ESSENTIAL FUNCTIONS AND RESPONSIBILITIES

• Manage the security portfolio to protect Pyrotek’s Information System (IS) infrastructure and data from unauthorized access through these functions:
  • Select and acquire security solutions or enhancements to existing security solutions to improve overall enterprise security as per the enterprise's existing procurement processes.
  • Create and maintain security architecture design as well as documents (policies, standards, baselines, guidelines, and procedures).
  •  Work with senior IS staff to protect against new risks to Pyrotek and review new tools that could improve Pyrotek’s protection against threats.
  • Provide input into business continuity plans and disaster recovery from a security footing.
  • Oversee the deployment, configuration, and integration of security solutions and of any enhancements to existing security solutions.
  • Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers, and other systems and in databases and other data repositories.
  • Work with Cloud team to implement Data Loss Prevention (DLP) policies where required. 
  • Design security runbooks to manage various security incidents and ensure the security team follows the runbooks.
  • Supervise all investigations into problematic activity and provide on-going communication with senior management.
  • Supervise the design and execution of vulnerability assessments, penetration tests and security audits.
  • Perform regular security awareness training for all employees to ensure consistently high levels of compliance with enterprise security documents. Maintain regular phishing testing for all users.
  • Oversee the process for reporting suspicious emails and ensuring that new risks are blocked in Pyrotek systems.
• Effectively lead projects as assigned to ensure projects are delivered within scope and within agreed upon timelines, utilizing the defined level of manpower and established third party costs. 
• Ensure effective communication of goals, objectives and expectations throughout assigned department/team members. Maintain the cooperation and support of team members company-wide through effective interdepartmental communication. Serve as a role model in areas such as professionalism, service orientation, agent of change, education, and commitment to organizational goals and objectives.
• Foster attitudes, conditions and environments that guide your team toward excellence while acting with integrity and ethics aligned with Pyrotek core values. Create a work environment that helps foster tolerance, acceptance and civility and the ability and desire of team members to act in empowered ways.
• Actively reward / recognize team members to reinforce accomplishments and positive outcomes.
• Determine the effectiveness of policies, procedures and projects/plans. Take appropriate corrective measures when necessary. Identify new applications, innovations, quality and/or safety improvements and
  report findings/results to management. Ensure all activities and operations are performed in compliance with federal/national, state/regional and local regulations.

Qualifications

Education/Experience  Bachelor’s Degree in Information Systems, Computer Science, or related field; plus, a minimum of eight (8) years of progressive experience in system security, to include five (5) years of experience in enterprise security architecture design and security document creation experience, or equivalent combination of education and related experience.

One or more of the following certifications is a significant advantage: GIAC Security Essentials Certification, GIAC Security Leadership Certification, ISACA Certified Information Security Manager, Microsoft Certified Systems Engineer: Security, and/or (ISC)2 SCCP, CIS