Information Security Manager

Summary:The Information Security Manager is responsible for ensuring robust measures are in place to protect the Company s systems from cyberattacks, hacking, and other threats. This role develops and executes security controls, defenses and countermeasures to ensure the security, compliance, and risk mitigation of the Company s technology infrastructure and data assets and effectively responds to incidents or breaches of information security operations. This position works closely with the Network Infrastructure and Applications team to ensure seamless security application across all platforms. This role will also work closely with legal to ensure a robust and enforceable set of information security policies are in place and functioning properly. Responsibility:

• Maintains, plans, designs, and builds security architectures.
• Oversees the implementation of network and computer security and ensures compliance with corporate cybersecurity policies and procedures.
• Monitors cybersecurity requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related network devices.
• Performs security assessments of applications and systems using penetration and vulnerability testing and risk analysis.
• Configures and assists with the installation of firewalls and intrusion detection systems. Ensures that infrastructure and software patches are maintained at a status to reduce the risk of vulnerabilities impacting the ability of the organization to perform normal operations, as expected.
• Responds immediately to cybersecurity-related incidents and provides a thorough post-event analysis.
• Investigates intrusion incidents and conducts forensic investigations.
• Analyze business needs and priorities for protection of critical systems.
• Provide support to Network Administration and operations.

Qualifications:

• Bachelor s degree in computer science, network engineering, information security, or related field and 5 years of network security administration/engineering or infrastructure architecture experience required; or 8 years of network security administration/engineering or infrastructure architecture experience in lieu of a degree.
• In-depth security framework knowledge and experience.
• Experience leading security incident response methodologies.
• Cybersecurity certification preferred (Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Information Systems Auditor (CISA)).

Key Competencies:

• Strong understanding of network security concepts, protocols, and technologies (firewalls, VPNs, IDS/IPS, etc.)
• Strong analytical and problem-solving skills.
• Demonstrated ability to work collaboratively cross functionally and with varying levels of management.
• Ability to manage complex projects and prioritize tasks.
• Strong attention to detail.
• Strong verbal and written communication skills.

Physical and Mental Demands:

While performing the duties of this job, the employee is frequently required to sit, talk and/or hear, and/or use hands to fingers, handle, or touch objects, tools, or controls. The employee is occasionally required to stand, and/or walk. The employee must occasionally lift and/or move up to 25 pounds while moving files or small packages. Specific vision abilities required by this job include close vision and the ability to adjust focus. The mental and physical requirements described here are representative of those that must be met by an individual to successfully perform the essential functions of this position. Mental Demands consist of frequently interpret data, make decisions, organize, problem solve, and time management. On call and/or overtime work required as needed. Travel may be required up to 15%.

DecoPac, Inc. is committed to providing equal employment opportunity to all applicants and employees according to all applicable laws, directives and regulations of federal, state, and local governing bodies and agencies. In keeping with this commitment, DecoPac, Inc. will recruit, hire, train and promote persons in all job titles, without regard to race, color, creed, religion, sex (including factors related to pregnancy or child birth), national origin, age, marital status, familial status, disability, sexual orientation, gender identity status with regard to public assistance, employment status, local human rights commission activity, status as a protected veteran, genetic information, atypical hereditary cellular or blood trait, or any other protected category.