Manager Information Security Governance

What You Need To Know

 

Open the door to a groundbreaking tech career with an industry leader. Southern Glazer’s Wine & Spirits is North America’s preeminent wine and spirits distributor, as well as a family-owned, privately held company with a 50+ year legacy of success. To create a new era in alcohol beverage sales and service, we’re heavily invested in the most transformative new technologies – and the most brilliant tech professionals. Southern Glazer’s was named by Newsweek as a Most Loved Workplace and is included on the Forbes lists for Largest Private Companies and Best Employers for Diversity.

 

As a full-time employee, you can choose from a full menu of our Top Shelf Benefits, including comprehensive medical and prescription drug coverage, dental and vision plans, tax-saving Flexible Spending Accounts, disability coverage, life insurance plans, and a 401(k) plan. We also offer tuition reimbursement, a wellness program, parental leave, vacation accrual, paid sick leave, and more.

 

We offer continuous learning and career growth in a fast-paced environment where you are respected, your voice is heard, and technology is part of our strategy for success. If you’re looking to fill your glass with opportunity, come join our FAMILY.

Overview

 

The Manager, Information Security Governance role will manage the Information Security Governance team. This position is responsible for leading a team of Security Governance Analysts that perform day-to-day operations and assessments. Works with direct reports to help design, implement, and assess controls designed to protect the business, including drafting and roll-out of Information Security policies and procedures. This role will interface closely with leaders from other business units and provides guidance on Information Security to all areas of the business.

Specialized Skills and Technologies

 

• Excellent technical writing skills to draft and review policies and procedures
• Excellent understanding of various frameworks, including- NIST Control and Risk Assessment, PCI-DSS, ISO 2700X
• Ability to use, manage implementation/enhancement, and administer large GRC platform such as ServiceNOW IRM and other InfoSec Governance tools.
• Ability to manage and implement Information Security training programs.
• Ability to work with IT Architects in advisory capacity on Information Security matters
• Participate in enterprise wide initiatives and testing for DR, BCP, IR, and large system implementation
• Excellent teaching, problem-solving, communication, and interpersonal skills
• A solid understanding of networking, systems, and security related technologies and frameworks
• Able to build and maintain relationships, provide mentorship, and present ideas in an effective manner.
• Able to utilize staff strengths, develops staff in weak areas, and constructively address staff performance problems
• Strong communication and decision-making skills
• Strong ability to influence others
• Proven ability to analyze and solve problems with excellent attention to detail
• Strong team player who can work across multiple functions and disciplines

Primary Responsibilities

 

• Manages and maintains information security policies and procedures.
• Manages internal operations projects that may require cross-department resources and coordination
• Monitors the IT ticketing system to ensure timely correction of any incidents, exception requests and assurance needs.
• Analyzes activities and documented resolutions, identifies problem areas, devise, and deliver solutions to enhance quality of service and prevent future issues
• Helps to define key operational metrics, develop reporting, and set targets to continuously improve
• Directs and participates in Information Security projects and supports team efforts for day-to-day operations
• Responsible for setting staff goals and training, defining technology priorities, and developing long-term strategies to manage and scale the information security program
• Supervises one or more staff and provides them with technical guidance and mentoring
• Aggressively automates repeated tasks to allow the team to scale with the organization’s growth
• Communicates and acts as liaison with end users and colleagues
• Communicates progress on priorities and budget to management and team
• Serves as a member of the team in a technical and process expertise roles
• Serves as a subject matter expert inside of SGWS and assists with complex issues pertaining to Information Security and Governance as needed
• Participates in on-call rotation as needed to support Information Security team.
• Recruits staff to incl