Manager, IT Security Operations

We are the leading provider of worldwide smart end-to-end supply chain & logistics, enabling the flow of trade across the globe. Our comprehensive range of products and services covers every link of the integrated supply chain – from maritime and inland terminals to marine services and industrial parks as well as technology-driven customer solutions.

 

JOB DESCRIPTION

The purpose of the Information Security Operations Manager role is to lead and manage the team of IT Security Analysts in safeguarding the company's critical assets, data, and infrastructure from cyber threats and security breaches. 

This pivotal position is responsible for developing and implementing robust information security strategies and policies, as well as ensuring compliance with industry standards and regulatory requirements. The Information Security Operations Manager plays a crucial role in enhancing the organization's security posture by overseeing security operations, incident response, threat detection, vulnerability assessments, and patch management.

 

KEY ACCOUNTABILITIES

• Team Leadership: Manage, mentor, and support a team of IT Security Analysts, fostering their growth and development. Provide guidance in resolving complex security issues and promoting a proactive security mindset throughout the team
• Security Operations Management: Oversee day-to-day security operations, including incident response, threat detection, vulnerability assessments, and patch management Ensure that incidents are handled efficiently and in accordance with established protocols.
• Security Strategy and Policy: Develop and implement robust information security strategies and policies in line with industry standards and regulatory requirements. Continuously assess and enhance the effectiveness of security controls
• Security Awareness Training: Collaborate with the training department to design and conduct regular security awareness programs for all employees, enhancing their understanding of security risks and best practices
• Incident Response Planning: Develop and maintain comprehensive incident response plans to address various security incidents effectively. Conduct periodic mock drills and table-top exercises to test the team's readiness
• Security Tools and Technologies: Evaluate, implement, and manage security technologies, such as SIEM, IDS/IPS, endpoint protection, and network security appliances, to bolster our defense against cyber threats
• Risk Assessment and Compliance: Conduct risk assessments and vulnerability analyses regularly. Ensure compliance with relevant information security laws, regulations, and industry standards
• Monitoring and Reporting: Establish security metrics and KPIs, generating periodic reports to executive management, highlighting the security posture, ongoing initiatives, and areas of concern
• Third-Party Security Management: Collaborate with relevant stakeholders to assess and manage security risks related to third-party vendors and partners
• Research and Development: Stay up-to-date with the latest security trends, emerging threats, and industry best practices. Continuously seek opportunities for improvement in the organization's security posture
• Establishes KPI’s for the InfoSec function
• Regular bulletins
• Corporate communications

 

QUALIFICATIONS

• A bachelor’s or master’s degree in computer science or IT Security or a combination of equivalent professional training and security industry certifications, combined with a minimum of three years related work experience in a position(s) with increasing responsibility may be accepted

 

EXPERIENCE 

Experience in information technology that encompasses a variety of roles, such as working with SIEM, Data Loss Protection, Vulnerability Management, Forensics, IDS/IPS, privilege and identity management as well as software and security architectures, like NISt and ISO27001.

 

• 3-5 years’ experience in leadership role and/or completion of a professional development program in supervision and personnel management may be required
• 3-5 years in an environment that follows IT Security best practices
• 5+ years within a technical support environment
• 3-5 years in a security or disaster recovery role
• 2-3 years’ experience working with internal/ external auditing

 

SKILLS 

• Strong communication skills - You are an exceptional listener.  You communicate clearly.  You write exceptionally well, and you speak eloquently. You can explain just about anything to anyone.  You’re comfortable on the phone or to groups of people – at any level.  You are incredibly tactful when delivering the facts.
• Problem solving - You enjoy solving problems. You love ta