Information Security Manager

*Salary Grade is the range one can make during their time in this role. Not the guaranteed starting range.

Department/Location:

780 - Information Technology/ National Headquarters

Job Title:

Information Security Manager

Report to:

IT Security & Operations Associate Director

Salary Grade:

ý – Grade 16 ($74,360.00 - $115,627.20/year)

Type of position:

ý Full-time o Part-time Minimum Hours: 40 /Hours Week ý Exempt o Nonexempt

Job Summary: The following statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

Responsible for organizing DAV information security activities, risk assessments and to manage internal efforts to ensure compliance with laws, regulations, internal policies and standards.

Essential Functions:

• Develop and recommend security policies, standards, procedures and controls for maintaining data security
• Conduct reviews to measure compliance with NIST, PCI, and ISO standards, regulations and frameworks
• Monitor compliance with state, federal and international laws regarding data privacy and security breaches
• Develop a security strategy, security awareness program, security architecture, and security incident response
• Develop and maintain up-to-date security policies, standards and guidelines
• Oversees training and dissemination of security policies and practices
• Coordinate information security efforts of all internal IT groups, to ensure that organization-wide information security efforts are consistent across DAV, and that duplication of effort is minimized
• Manage audit gaps, identifies those within IT, and responsible for remediating or closing audit findings, negotiate dates for closure, and track/report progress
• Assist management in conceptualizing all compliance related risks that DAV faces, and how best to deal with these risks using an integrated risk management approach
• Provides strategic risk guidance for IT projects, including evaluation and recommendation of technical controls
• Perform other duties as assigned
• Up to 10% travel required

Essential Skills and Experience:

• Broad knowledge of information technology governance practices including risk, audit, policy and standards development, metrics development, and education and training
• Strong knowledge of, and experience working in, industry-wide information security frameworks, including ISO 27001 and NIST
• Strong organizational skills
• Strong project management skills
• Self-Starter requiring minimal supervision or direction
• Ability to motivate and lead technical teams
• Excellent written and verbal communication skills
• Exposure to MS Word, MS Project, SharePoint and associated processes and tools
• Required: Bachelor's Degree or 5+ years of experience in the field or in a related area
• A valid motor vehicle driver’s license (other than motorcycle) is preferred

Degree of Supervision:

• No Supervisory Responsibilities

Physical Demands and Work Environment: The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Physical Demands: Job requires sitting up to eight hours a day and standing two to four hours a day. Body movement primarily in hand and arm functions associated with normal office activities. Hand and eye coordination, and hand dexterity is required for handwriting and keyboarding over prolonged periods of time. Specific vision abilities required by the job include close vision, distance vision, peripheral vision, depth perception, and the ability to adjust focus. This position requires occasional lifting and/or carrying of no more than 25 pounds, and bending, squatting, pushing, and pulling.
• Work Environment: The noise level in the work environment is usually minimal.