What are the responsibilities and job description for the Manager, Information Security- Hybrid, Pittsburgh, PA (candidates must be local to Pittsburgh, PA) position at A.C. Coy?
Overview
Location: Hybrid- Pittsburgh, PA (candidates must be local to Pittsburgh, PA)
Job Type: Full Time/Permanent
Work Authorization: No Sponsorship
The A.C.Coy has an immediate need for a Manager of Information Security for a full time opportunity.
Responsibilities
- Collaborate closely with various Technology teams and Firm leadership to inspire, mentor, and cultivate the skills of the security team members, fostering a high-performance environment
- Develops and maintains information security policies, procedures and training and advise the various departments in adhering to them
- Leads the ongoing ISO 27001/27701 lifecycle and manage the relationship with our consulting team to ensure security operations compliance
- Provides expert opinions and leadership over existing technical threats and advice on how to mitigate or identify as acceptable risks
- Oversees vulnerability scanning and remediation programs
- Establish and Oversee Security Metric investments and risk trending dashboard
- Oversees and/or assists in performing on-going security monitoring threat avoidance analyses
- Manage relationships with security managed service providers and continuously develop their capabilities
- Analyzes new systems (hardware and software) and provides recommendations concerning their security
- Coordinates the development of an ongoing information security awareness program to ensure that employees are aware of threats and how to help ensure privacy of data
- Provide responses to client security audits/questionnaires/RFP’s
- Maintains appropriate security measures and mechanisms to guard against unauthorized access to electronically stored and /or transmitted client data and reasonably protect against anticipated threats and hazards
- Ensures compliance through adequate training programs and oversight of periodic internal and 3rd party security audits
- Assesses audit results and partners with staff to create pragmatic action plans
- Monitors execution and completion of action plans
- Provides technical guidance and training to information owners and designs and implements programs for user awareness, compliance monitoring and security compliance.
- Develops and maintain an ongoing risk assessment program targeting information security and privacy matters
- Active participant in Information Security and serves as Technology leader for incident response
- Serves as primary contact for Technology incident responses
Qualifications
Education: Bachelor's Degree or equivalent experience
- 10 years of experience working in an Information Security related field
- 5 years of experience managing a team of technical security engineers
- One or more of the following certifications strongly preferred: CISSP, CISM; matriculating candidates considered
- Strong understanding of various security frameworks; ISO27001/ISO27701 and SOC
- Working knowledge of EDR, Vulnerability Scanning, Firewall, Proxy, PAM/PIM, SIEM and other security-related technologies
- Ability to understand technical implications of security threats and prioritize risk
- Willingness to travel to other offices as required
