IT Security Manager

The IT Security Manager reports to the VP IT Infrastructure and Security and provides security technology leadership and support while implementing the Cyber Security Strategy through key strategies, processes, and procedures that align with MAA and IT security needs and objectives.

The successful candidate will embody and work to reinforce MAA’s Core Values. Those values include:

• Appreciating the uniqueness of each individual
• Communicating openly and with integrity
• Embracing opportunities
• Doing the right thing at the right time for the right reasons

Duties and Responsibilities

• Manages Information Technology (IT) security operations team by setting goals, assigning projects, performing evaluations, and promoting professional growth of assigned staff.
• Implements strategy and direction for operational planning projects to improve processes for automation and efficiency.
• Collaborates with internal and external stakeholders periodically to refine systems for enhancements across the infrastructure network.
• Oversees all reports and documentation related to systems operation of IT security tools and technology for better visibility and transparency.
• Develops maintenance schedules for IT security tools and technology; conducts system feasibility studies and testing.
• Develops proposal requests and implements security policies and procedures, including those for network architecture, security architecture, security standards, and service provision.
• Manages maintenance, development and updates related to IT security systems and company-associated hardware.
• Develops business case justifications and cost/benefit analyses for allocation of IT security tools and technology, including personnel, and equipment, to meet operational needs.
• Analyzes existing operations and makes recommendations for the improvement and growth of the IT security tools and technology and IT systems.
• Develops and manages critical IT security systems and policies. Manages all incident responses for the Security team and escalates issues as necessary.
• Implements and manages security awareness and training initiatives in line with corporate awareness and training plans Conducts research and remains abreast with latest technologies, trends, and solutions as it relates to the management of IT security services and support functions.
• Provides regular updates to senior management, department heads and end users regarding progress of IT security projects.
• Leads cross-functional teams and manages multiple vendor relationships as required.
• Performs other related duties as assigned to meet the needs of the business.

Required Qualifications

• Bachelor’s degree in Business, Computer Science, Information Systems or related area and five (5) to seven (7) years of experience in a corporate IT environment managing IT security solutions, or an equivalent combination of experience and education, required

Preferred Qualifications

• CISSP certification strongly preferred
• Experience with, and in-depth understanding of, associated frameworks, technologies & architectures preferred
• Experience with leading a technically complex organization and external resource management preferred
• Experience with network scanning tools (e.g., Tenable Nessus Professional, Tenable Security Center) preferred

Knowledge, Skills, and Abilities

• Knowledge of IT management concepts and practices, including infrastructure and incident management
• Knowledge of business operations and the impact of service levels and associated failures
• Knowledge of IT systems and regulatory controls
• Knowledge of IT security controls and associated protocols; penetration testing and vulnerability scanning tools
• Knowledge of SIEM products with LogRythm or Splunk being preferred
• a) Skill in developing custom alerts and SIEM correlations
• b) Skill in creating/tuning signatures and SIEM correlation rules to optimize intrusion analysis efforts
• c) Skill in Analyzing SIEM events and logs for the existence of security incidents
• d) Skill in creating SIEM reports that are meaningful at all levels of the organization
• Knowledge of TCP/IP protocol, IP addressing, IP sub-netting and IP configuration
• Knowledge of Microsoft Windows operating system, Exchange mail server, Office product suite
• Skill in managing teams, organizing and prioritizing projects to successfully meet deadlines
• Skill in applying critical thinking, analysis and problem-solving methods
• Skill in customer service orientation and interaction
• Skill and ability to clearly and concisely communicate verbally and in writing, including with non-technical audiences

Physical and Environmental Requirements

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand; walk; use hands to finger, handle or feel; and reach with hands and arms.

This position requires the ability to occasionally lift office products and supplies, up to 20 pounds.

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.

Disclaimer

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.