Manager, IT Security
Office Locations: NYC (near Grand Central), Pittsburgh, Chattanooga, Portland (Maine), Durham. Miami/Ft. Lauderdale/Boca (surrounding areas) and Boston are remote. Must be able to go into one of these offices 2 days/week (Hybrid).
About the role
In this role, you will lead the security team and be responsible for architecture, design, implementation, and management of our security framework in AWS, Azure, Microsoft 365, and other SaaS platforms. You will drive the automation of our security framework for ACA Group’s cloud software as well as internal corporate infrastructure. You will work closely with Information Risk on the execution and enforcement of our information security programs and serve as the primary contact for due diligence and audit teams, maintaining a repository of answers and evidence required to meet our obligations to clients and auditors for security certifications.
Responsibilities
- Lead the development and execution of the security strategy for ACA’s technology systems
- Manage and mentor staff to ensure they are successful and meet required deliverables
- Collaborate with Information Risk on the development and compliance of corporate security policies
- Collect and organize evidence and information about our environment for use in answering client Due Diligence questions as well as other audits such as SOC and ISO 27001
- Define and develop security monitoring standards
- Define and implement security policies and controls
- Develop automation to detect and enforce adherence to defined policies and controls
- Develop automation to detect configurations that do not align with security best practices
- Develop security dashboards for varying audiences from engineers to management
- Manage the IT Security budget and balance the cost of the security tools against provided value
- Participate in the design and implementation of disaster recovery and business continuity to ensure they operate following security baselines
- Craft and communicate creative and practical solutions to problems
- Perform ad-hoc work/special projects as necessary to support ACA on various client and internal initiatives
Requirements
- Bachelor’s Degree required – major in Cybersecurity, Information Security Management, Computer Science, or Management Information Systems preferred
- A minimum of seven (7) years of IT experience, with five (5) years in an information security role and at least two (2) years in a supervisory capacity
- Experience performing security risk assessments and compliance audits
Skills
- Demonstrated professional integrity
- Dependable, flexible, and adaptable to new initiatives and changing client needs
- Ability to work well in a fast-paced, small-team environment
- Self-starter who works to improve their own effectiveness as well as providing ad-hoc suggestions
- Executes assigned tasks on time and with high quality
- Works to first self-resolve when faced with challenges, requiring limited oversight
- Ability to work independently, multi-task, and prioritize effectively
- Ability to establish and maintain effective working relationships with colleagues and clients
- Highly motivated and goal oriented; proactive in one’s own education and career progression; volunteers for and shows initiative on both internal and external projects and tasks
- Dedicated to upholding high-quality standards and customer service focus
- Strong organizational and problem-solving skills with attention to detail
- Strong oral and written communication skills
Preferred Qualifications
- 3+ years’ experience in AWS or Azure Cloud Security & Security Automation
- Familiar with GDPR, SOC, NIST, and ISO 27001 standards and associated audit processes
- Security Certifications such as AWS Security, SSCP, CISSP, or CISM
Benefits
- Competitive compensation package with performance-based rewards
- Medical and dental coverage
- 401(k) plans
- Paid time off options, including designated ACA Paid Holidays, Summer Fridays, Personal/Family Care, and other leaves of absence
- Flexible work environment
- Student Debt Forgiveness
- Pet Insurance