Information security manager

- Develop, implement, and consistently enhance the organizations information security policies, standards, and procedures. - Ensure that security policies align with the organizations goals, regulatory requirements, and industry best practices (e.g., NIST, ISO 27001). - Monitor and enforce compliance with security standards among staff and third-party vendors. - Conduct regular audits, gap analyses, and performance assessments to identify deficiencies and propose recommendations. - Perform periodic risk assessments of IT systems, infrastructure, and vendors to identify vulnerabilities. - Collaborate with internal teams to address known vulnerabilities and prioritize remediation efforts. - Use vulnerability scanning tools and methodologies to maintain system integrity. - Oversee the management and monitoring of security information and event management (SIEM) systems for timely breach detection. - Lead incident response efforts, including containment, analysis, and remediation actions, as well as post-incident investigations. - Analyze root causes of security breaches and implement proactive measures to prevent future occurrences. - Work closely with cybersecurity teams, IT departments, and third-party vendors to support a robust incident response process. - Manage and monitor security systems such as firewalls, intrusion detection/prevention systems, and encryption protocols. - Protect sensitive data by overseeing access controls and ensuring compliance with data protection regulations like GDPR, HIPAA, and CCPA. - Implement secure protocols for data at rest, in transit, and during processing. - Create and deliver ongoing cybersecurity awareness and training initiatives for all employees. - Promote a security-first culture by providing guidance and resources to non-technical teams. - Conduct phishing simulations and other exercises to evaluate and enhance employee preparedness. - Ensure compliance with relevant laws and standards, such as SOC 2, PCI DSS, and FISMA. - Maintain comprehensive documentation and prepare reports for stakeholders, auditors, and regulatory bodies. - Perform other duties as assigned.