IT Security Manager - Cybersecurity Focus

- Develop and execute a comprehensive multi-year security strategy that aligns with our business goals and compliance requirements - Establish and monitor security KPIs/OKRs, providing regular updates on program health to IT leadership - Build and nurture a high-performing security team through mentorship and development initiatives - Promote a security-centric culture throughout our IT operations and the broader business - Manage and maintain enterprise security policies and standards, ensuring alignment with CIS and IEC62443 frameworks - Conduct risk assessments, third-party security reviews, and control testing; oversee remediation plans and exception management - Coordinate both internal and external audit processes, ensuring timely closure of findings - Govern a defense-in-depth approach to security across various domains including endpoints, identity, email, network, and cloud - Manage SIEM/XDR operations, including alert triage and automation of playbooks to enhance system performance - Collaborate with infrastructure and application teams to integrate security into new projects - Lead the comprehensive incident response lifecycle from preparation through recovery, including conducting tabletop exercises - Manage vulnerability exposure through scanning, prioritization, and remediation efforts - Analyze threat intelligence applicable to our industry and implement actionable detection and mitigation strategies - Oversee Identity and Access Management governance including role design and enforcement of multi-factor authentication - Implement and monitor data protection measures to ensure compliance and effectiveness - Design and deliver focused security awareness programs while tracking behavior changes in reporting and compliance - Offer consultative guidance to business units regarding secure design and risk factors in vendor selection