IT Security Manager (Problem Management)

About the Role:
As an IT Security Manager, you will independently lead comprehensive cybersecurity efforts within the organization. Your specialized skills will ensure the highest standards of security are upheld. You’ll be pivotal in shaping our security posture, addressing advanced security challenges, and supporting team projects with your expertise.

Wolters Kluwer Global Business Services (GBS) is designed to provide services to the business units in the areas of technology, sourcing, procurement, legal, finance, and human resources. These global centers promote team collaboration using best practices around a specific focus area to drive results and enhance operational efficiencies. There is a constant endeavor to benchmark against best-in-class industry standards to improve the quality of deliverables, increase cost savings, enhance productivity, and reduce time to market for products and applications.

We have an amazing opportunity for an IT Security Manager (Problem Management), available within our Global Business Services division! The IT Security Manager (Problem Management) will be responsible for identifying, analyzing, and managing the underlying causes of security incidents and events, ensuring the long-term protection and enhancement of the confidentiality, integrity, and availability of Wolters Kluwer assets.

As the IT Security Manager (Problem Management), you will lead information gathering and analytical efforts following suspected and confirmed security incidents to determine root cause and implement preventative measures to protect personal and confidential information at WK. In this role, you will be required to demonstrate proficiency in problem analysis, root cause investigation, data correlation, and information synthesis across all areas of IT security management. Your role will also include interfacing with and responding to internal business unit IT representatives and stakeholders at all levels to address systemic security issues, reduce recurrence of incidents, and improve overall security posture.

 Responsibilities:

• Primarily responsible for the identification, analysis, and management of underlying causes of information security incidents, acting as the focal point leading problem management efforts and ensuring effective actions are taken to prevent recurrence
• Supports the transition from incident response to structured problem management, in coordination with WK global security operations, driving root cause analysis (RCA) for significant or recurring security incidents
• Contributes to the analysis and delivery of findings to internal customers with impactful, comparative, interpretative security analysis in a clear, consistent, and factual manner, with a focus on long-term risk reduction
• Responsible for establishing communications bridges and meetings in support of problem investigation and remediation efforts
• Responsible for maintaining proper group focus during problem analysis activities and redirecting efforts in support of timely identification of root cause and permanent resolution
• Responsible for aggregating information relevant to security incidents and associated trends, synthesizing probable root causes, systemic issues, and control gaps
• Responsible for developing and recommending the best course of action based on solid security principles, focusing on permanent fixes and prevention of recurrence
• Drives the problem management process from identification through root cause determination, known error documentation, and implementation of permanent corrective actions
• Accountable for documenting all WK and partner activity related to problem investigations, root cause findings, and remediation actions
• Responsible for ensuring appropriate post-incident (post-mortem) and lessons-learned sessions are conducted, with emphasis on identifying root causes and preventive controls following restoration of service
• Responsible for organizing and taking part in cross-functional problem review and incident exercise activities, ensuring that policy and procedure are followed and continuously improved
• Responsible for ensuring knowledge of IT security, emerging threat scenarios, and industry best practices in problem management is current
• Responsible for ensuring information arising from problem management activities, including required configuration changes or control enhancements, is communicated to the proper operational contacts for execution
• Accountable for establishing and maturing the Security Problem Management capability, ensuring alignment with ITIL best practices and integration across Security Operations, Engineering, and Enterprise IT functions
• Drives strategic reduction of security risk by identifying systemic control gaps and ensuring sustainable remediation across tec