What are the responsibilities and job description for the Manager, Information Security Operations position at Connexus Credit Union?
Connexus Credit Union - Who We Are:
Serving members across all 50 states, Connexus Credit Union is a member-focused cooperative that is proud to return profits to member-owners through high yields for checking accounts and deposit products, as well as competitive rates on our loans. We are a remote first employer with the majority of our employees residing in the upper Midwest.
As an employer we foster collaboration and high performance to achieve excellence. We holistically care for and develop our employees to thrive personally and professionally. We are proud to share our success with our employees and those we serve.
Connexus offers an Amazing Benefits package:
25 days of paid time off and 8 paid holidays
16 hours of paid Volunteer Time Off
401K Retirement with up to 6% employer match
Excellent Health, Dental, Vision insurance, including multiple plan options
Health Savings Account with generous employer contributions
Employer paid Life insurance, Short-Term and Long-Term Disability
Tuition Reimbursement from $4,000 - $7,000 per calendar year
Robust Learning and Development program that includes an annual professional development stipend
About the Role:
The Manager of Information Security Operations will lead the Security Operations Team in managing and optimizing information security systems and controls. This role is pivotal in safeguarding the confidentiality, integrity, and availability of the organization's computer networks, systems, and applications. Key responsibilities include the development and management of the enterprise security solution stack, driving information security initiatives, risk analysis, vulnerability tracking and remediation, and orchestrating responses to security incidents and events. Reporting to the Vice President of Information Security, the Manager of Information Security Operations is a crucial member of the Information Security team. The role demands active collaboration with the Business Technology (BT) team and cross-departmental stakeholders, enforcing compliance with the organization's security policies, procedures, and standards.
The Manager is tasked with enhancing the Information Security program by implementing 'secure-by-design', 'defense-in-depth', and 'least-privilege' approaches. This aligns with the organization's commitment to cybersecurity best practices, adherence to industry standards, frameworks, and regulations. This position requires a keen understanding of emerging cybersecurity threats and vulnerabilities, coupled with a strong ethical commitment to maintaining the organization's reputation and promoting sustainable growth.
Responsibilities:
Security Engineering & Monitoring
Execute and manage information security projects.
Oversee security monitoring and defense of IT systems.
Maintain the effectiveness of security monitoring tools.
Collaborate with BT and other departments for integrated security compliance.
Serve as a security consultant on projects, guiding technology integration.
Produce regular security reports for senior management.
Evaluate and implement new security technologies.
Improve operational response by optimizing alert processes.
Team Leadership & Development
Lead, mentor, and manage a team of information security analysts.
Promote a culture of continuous learning and professional development.
Conduct performance management and career development for the team.
Implement and oversee delivery of security operations processes and standard work.
Advise infrastructure teams on threat detection and mitigation.
Security Governance, Risk & Compliance
Assist auditors and examiners in the collection of control related documentation and to support risk reduction efforts.
Conduct IT security risk assessments and advise on control designs.
Manage the vulnerability management program, including detection, classification, and remediation.
Support adherence to information security policies and regulatory compliance.
Coordinate penetration testing and social engineering tests.
Incident Response
Lead the incident response team during security events.
Coordinate multi-departmental incident management and resolution.
Conduct post-incident analysis and develop prevention strategies.
Maintain the Security Incident Response Plan.
Prepare cyber-threat intelligence reports.
Coordinate cybersecurity exercises and improve monitoring and response processes.
Communicate incident findings to both technical and non-technical teams.
Security Strategy & Policy Implementation
Assist with the development of strategic security initiatives to protect institutional assets.
Regularly update and enforce security policies and procedures.
Ensure compliance with financial sector regulations.
Create and implement security awareness programs for employees.
Develop, maintain, and report on InfoSec related metrics, measures, and KPIs.
Other Responsibilities:
Stay current with trends in cybersecurity and incident management.
Participate in ad hoc projects and corporate initiatives.
Support business continuity and disaster recovery efforts.
Identify and report process improvement opportunities.
Maintain effective relationships with service providers and vendors.
Position Requirements:
This position is Remote.
Bachelor's degree in a computer science, information systems, or technology field; or commensurate experience in cybersecurity is Required.
7 years of experience in cybersecurity operations or incident response is Required.
3 years of experience managing, leading, and working with remote/distributed teams with diverse backgrounds in a security field is Required.
Deep understanding of effective defensive controls for enterprise-level IT technologies including networks, endpoints, virtualization, cloud, operating systems, email, storage, databases, etc. is Required.
Prior experience working in and understanding of industry compliance standards and regulations (ISO, NIST, PCI DSS, SOC II Type 2, CIS, GLBA, CCPA, etc.) is Required.
One or more of the following security certifications is Required: CISM, GSEC, GCLD, CISSP, CISA, GCIH, Security .
Connexus Credit Union's Employer Recognitions:
2024 Best in Class Employer, Gallagher
2025 Best Place to Work in IT, Computer World
Equal Opportunity Employer/Disabled/Veterans/41 CFR 60-1.4, 41 CFR 60-1.35
Connexus Credit Union is an equal opportunity employer committed to diversity and inclusion, and fair treatment, free of discrimination and retaliation. We will not discriminate against any employee or applicant for employment based on race, color, age, religion, sex, pregnancy, national origin, genetic information, sexual orientation, gender identity, veteran status, the presence of mental, physical, or sensory disability, or any other status protected under federal, state or local laws.
Salary : $4,000 - $7,000
