Manager, Cybersecurity

As infrastructure critical to the region’s growth and prosperity, BNA is a vital asset for Middle Tennessee and serves as a gateway to Music City and beyond. According to a recent State of Tennessee study, in 2019 alone, BNA generated more than $9.9 billion in total economic impact. BNA supported more than 76,000 jobs in the region and produced more than $443 million in state, local and federal taxes. BNA receives no local tax dollars. For more information, visit flynashville.com. Follow us on Facebook: @NashvilleInternationalAirport, Twitter: @Fly_Nashville and Instagram: @FlyNashville. Learn more about BNA® Vision, our growth and expansion plan for the airport, at BNAVision.com.

  Hiring Process:

• Apply online
• Interview
• Offer
• Ten (10) year background check, including criminal history check, motor vehicle check, pre-employment drug screen, credit check, and breath alcohol test
• Onboarding

 Benefits:  

• Deferred compensation plans
• Educational Assistance
• Health, Dental, Vision, Life, Disability Insurance
• Health Screenings
• Paid Holidays
• Annual/Bereavement/Military Leave

Accepting Applications Until Filled

Job Summary: The Manager, Cybersecurity will report to the Director, IT Governance & Business Applications and is responsible for the establishment and maintenance of the Metropolitan Nashville Airport Authority's information security management program and requires in-depth understanding of data breach reporting laws, generally accepted information security principles, and related information technology security best practices. Requires familiarization with security tools, auditing and compliance practices (PCI, NIST), and Information Technology Infrastructure Library (ITIL) best practices including the selection, planning, delivery, maintenance, and overall lifecycle of IT services within the Authority. Familiarity with Cisco networking solutions. 

Starting Salary Range: $102,744- $139,788

Essential Responsibilities: 

• One of two designated Cybersecurity point of contacts and on-call 24-7-365 for Transportation Security Administration in the event of a cybersecurity incident.
• Maintains and enforces network security policies, standards, and processes to be compliant with Transportation Security Administration (TSA) cybersecurity requirements.
• Leads information security staff. Evaluates performance, provides feedback for training and development purposes. Presents ideas to upskill staff for future growth. Issues corrective action when appropriate and according to policy.
• Presents ideas to control costs in IT and other functional areas.
• Develops and maintains IT security governance structure to reduce risks in business processes, enhances information security, and complies with regulatory requirements.
• Establishes the methodology for the control, security, and integrity of data.
• Establishes, maintains and enforces network security policies, standards and processes while aligning with defined industry standards (e.g. NIST, PCI).
• Ensures that security programs comply with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
• Works with business units to identify perceived threats to the integrity, availability and confidentiality of information assets.
• Collaborates with the IT Infrastructure team to ensure alignment between the security and enterprise architectures.
• Evaluates and recommends products and procedures for sustainment of IT security infrastructure systems.
• Deploys Security Awareness Program, Computer Incident Response Plan and Disaster Recovery / Business Continuity Plans to safeguard the Authority.
• Plays a key role in end-user awareness, education and communications related to information security. Deploys methodologies to perform risk assessment, business impact analysis and security assurance to improve systems and operational security.
• Leads and oversees information security audits to identify potential threats, vulnerabilities and associative risks.
• Provides information security expertise, risk assessment and consulting for internal projects.
• Creates a framework for roles and responsibilities with regard to information ownership, class