Sr. IT Security Manager at Peterson Technology Partners

Job Description

Your Role

The Senior IT Manager - Security Engineering will report directly to the Director of Information Security and provide the vision and strategic direction for building and running new stand-alone Continuous Monitoring, Vulnerability Management, Threat Intelligence, and Incident Response programs. The role will have full accountability for management of the related architecture, processes, technologies, and service providers’ relationships, while partnering with business unit and other functional stakeholders. The Cyber Defense service will be developed with adherence to policies, relevant industry frameworks, regulatory, compliance, and operational performance requirements. We embrace and accept individual experiences and backgrounds to achieve a diverse and inclusive workplace.

You will have the opportunity to:

• Account for all critical technology assets.
• Ensure continuous monitoring of events within technology footprint.
• Hold asset owners accountable for the remediation of vulnerabilities, discovered through periodic scanning.
• Prioritize risk mitigation based on threat intelligence information.
• Lead responses to cyber incidents encountered in environment.
• Shape the information security culture and drive adherence to pertinent policies, standards, and procedures.

We need you to have:

• Bachelor’s degree in Computer Science or similar area of study, or a directly related field with 10 or more years of work experience.
• 10+ years of work experience leading Cyber Defense Management.
• Exceptional ability to assess and communicate information security concepts and practices, with both business and IT stakeholders.
• Prior experience supporting hybrid multi-cloud environments, including SaaS, PaaS, IaaS, and on-premises solutions.
• Proven experience in design, implementation, and operations of a cyber-defense program with heavy leverage of managed security service provider(s).
• Working knowledge of MITRE ATT&CK, NIST CSF, ISO 2700x, and COBIT frameworks/standards in relation to a cyber-defense program.
• Ability to travel 5%.

Icing on the Cake:

 •ClSSP, CISA, or Cloud security certification.