Staff4Me is currently hiring an experienced IT Security Manager to join our team. As an IT Security Manager, you will be responsible for establishing and maintaining the overall security posture of the company's information systems. You will develop and implement security strategies, policies, and procedures to protect critical data and systems from cyber threats. Additionally, you will lead incident response efforts and provide guidance to the IT team in managing security incidents.

Responsibilities

• Develop and implement comprehensive security strategies, policies, and procedures.
• Ensure compliance with industry standards and regulations (e.g., ISO 27001, GDPR, HIPAA).
• Conduct risk assessments and vulnerability assessments to identify potential security issues.
• Monitor and analyze security events and incidents to identify threats and vulnerabilities.
• Lead incident response efforts, including investigation, containment, and resolution of security incidents.
• Collaborate with cross-functional teams to identify and address security risks in IT systems and applications.
• Provide guidance and support to IT team members in managing security incidents and implementing security controls.
• Stay up-to-date with emerging threats and trends in information security and propose proactive measures.
• Coordinate and conduct security awareness training for employees.
• Manage relationships with external security vendors and consultants.

Requirements

• 5+ years of experience in IT security management or a similar role.
• Strong knowledge of information security standards, best practices, and regulations.
• Experience in developing and implementing security strategies, policies, and procedures.
• Proficiency in conducting risk assessments and vulnerability assessments.
• Hands-on experience with security tools and technologies (e.g., SIEM, DLP, IDS/IPS).
• Knowledge of network and cloud security principles and technologies.
• Experience in incident response and conducting security investigations.
• Excellent problem-solving and decision-making skills.
• Strong leadership and communication abilities.
• Professional certifications such as CISSP, CISM, or CISA are preferred.