Manager Information Security - Rogers Corporation

Rogers Corporation is seeking an Information Security Manager to provide information security direction, leadership and oversight of key information security systems, platforms, and processes. This position will provide leadership and direction to key cybersecurity program components including but not limited to Security Architecture, Engineering, Implementation, and Tooling.

• Role will focus on defending against and/or mitigating cyber threats and IT compliance risks using a combination of IT security measures, controls, and policies.
• Use of network infrastructure devices and boundary defense systems using network and endpoint security tools and configurations.
• Apply experience to manage O365 and Azure/Microsoft-based technologies to help manage data and asset risk.
• Able to use data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats.
• Flexibility in addressing various security problems across a disperse set of assets.
• Other duties as assigned.

Essential Functions:

• Empowered to define and manage the cybersecurity and identity roadmap (IAM, PAM, TVM) on yearly basis to make sure the security posture remains current, and risks are appropriately managed.
• Lead efforts to ensure the effective implementation of infrastructure and application that relate to security architecture, policies and standards.
• Maintains organization's security effectiveness & efficiency by supporting strategic plans for implementing & supporting information technologies and championing information security strategy.
• Support compliance with various regulatory standards, such as Sarbanes Oxley, NIST and other compliance frameworks.
• Assists with annual budget preparation; helps define immediate and long-term goals, priorities, and operational plans, and provides strategic input and guidance on development and preparation of the enterprise cybersecurity budget.
• Familiarity with secure network communications practices and protocols for hybrid data center deployments.
• Familiarity with industry security frameworks including NIST, ISO, COBIT, and CISC Top 20 controls.
• Experience in a manufacturing environment
• Travel Requirement: 0%-10 %

Qualifications:

• Bachelor's degree in computer science, Management/Computer Information Systems, or a related field (e.g., Information Technology, Computer Engineering, Electrical Engineering, Mathematics).
• Minimum 7 years of progressive IT security experience, with 3 years of security management experience.
• Network and Systems (Windows, Linux) Security and Security Operations Management experience.
• Application, SaaS, & Software Security experience.
• Leads and provides direction to cybersecurity technical professionals in complex day-to-day operational support of hardware, software, and cloud-based security tools. Proficiencies over half and familiarity with most of the following:
  • Identity and Access Management (IAM)
  • Privileged Access Management (PAM)
  • Threat and Vulnerability Management (TVM)
  • Technical Program Development and Maturity
  • Security Architecture and Design
  • Data Loss Protection (DLP)
  • Cloud Platform / CASB
  • Network Access Control (NAC)
  • Firewalls and network security controls
  • Operational Technology (OT) Security
  • Security Operations tools including Security Incident and Event Monitoring (SIEM), Network Detection and Response (NDR), Endpoint Detection and Response (EDR), and Managed Detection and Response (MDR)