IT Security Manager

BDH

10 years of technical experience with information security and technology.
Bachelor’s degree in Business/Computer Science or equivalent.
Experience in the implementation and management of both offensive and defensive security technologies in conjunction with commercial and federal information security compliance initiatives.
Deep technical understanding of network, systems, application and cloud security.
Excellent technical communication and analytical skills.
Excellent leadership, time management and organization skills with an aptitude towards creative problem solving.
Ability to simplify and report on complex technical functions and risks to senior leaders.
Working knowledge and experience in compliance/remediation efforts of relevant domestic and international security standards and best practices such as PII, PCI DSS, ISO 27001/2, SSAE 16, SOX and AML.
Working knowledge of and experience in policy and process creation and management.
Mandatory certification in one or more of an industry recognized security certification such as CISSP, CISM, CISA, CCIE, and GSEC.
No travel restrictions, both domestic and international travel, having an international sense of business.

İŞ TANIMI

 
Create and maintain the enterprise’s security architecture design.
Create and maintain the enterprise’s security awareness training program.
Select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise security as per the enterprise’s existing procurement processes.
Oversee the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.
Ensure the enforcement of enterprise security documents.
Supervise all investigations into problematic activity and provide on-going communication with senior management.
Supervise the design and execution of vulnerability assessments, penetration tests and security audits.
Perform regular security awareness training for all employees to ensure consistently high levels of compliance with enterprise security documents.
Engage in ongoing communications with peers in the Systems and Networking groups as well as the various business groups to ensure enterprise wide understanding of security goals, to solicit feedback and to foster co-operation.