Manager of IT Security
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must not repeat job title as heading. We must include sections only if posting has real specific content. We must preserve all substantive info, not invent or summarize away detail. Remove boilerplate etc.
We need to parse the job posting.
Key sections:
- Job Summary: description about role. Could be "About the role" heading.
- Essential Duties And Responsibilities: list of duties. Could be "Responsibilities" heading.
- Qualifications: required and preferred. Could be "Qualifications" heading.
- Knowledge & Skills Required: could be "Skills" heading.
- Benefits: there is a "Radwell Benefits" section describing benefits.
- Pay: Salary Information section gives salary range and bonus eligibility.
- Schedule: Work Schedule section gives schedule details.
- Possibly "Supervisory Responsibilities" could be part of Responsibilities.
- "Metrics" maybe not needed as separate heading; but could be part of Responsibilities? The instruction: include a section ONLY when posting has real, specific content for it. We have content for Metrics (KPIs). Could be under Responsibilities or a separate "Performance Metrics" but not in allowed headings list. Allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we must map content to those.
- "Requirements" maybe same as Qualifications? Could combine. But we have both Required and Preferred qualifications. Could put under Qualifications.
- "Skills" could be Knowledge & Skills Required.
- "About the role": Job Summary.
- "Responsibilities": Essential Duties And Responsibilities + maybe Supervisory Responsibilities + Metrics? Could include.
- "Benefits": Radwell Benefits.
- "Pay": Salary Information.
- "Schedule": Work Schedule.
- Also maybe "Work Environment" etc not needed.
We must not include headings with filler like "not specified". All sections have content.
We need to use - for any list of duties/requirements/benefits. So for responsibilities list, we need to break into bullet points. The responsibilities are long paragraphs with multiple sentences; we can split into logical bullet points.
We must preserve ALL substantive information; do not invent or summarize away detail. So we need to keep all details, but we can format as bullet points; each bullet can contain a sentence or multiple sentences. Must not lose any detail.
We must not repeat job title as heading. So no heading for Manager of IT Security.
We must not put Job ID/requisition numbers as headings; none present.
We must remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The posting doesn't seem to have those except maybe at end "May be modified from time to time." etc. That's part of responsibilities? It says "May be modified from time to time." That's generic; but it's part of the posting; we should keep if it's substantive? It's a boilerplate line; but it's not explicitly listed as boilerplate to remove. It's a generic statement; but we can keep it as part of responsibilities maybe.
We need to output only HTML fragment, no /, no markdown fences.
Let's craft.
Structure:
About the role
[Job Summary text]
Responsibilities
- ...
...
Qualifications
Required: ...
Preferred: ...
Or we could use for each.
But instruction: Use - for any list of duties/requirements/benefits. For qualifications, it's a list of requirements; we can use
.
Similarly for Skills.
For Benefits: list.
For Pay: maybe just with salary range and bonus.
For Schedule:
with schedule details.
Let's extract content.
Job Summary:
"The Manager of IT Security is responsible for developing, implementing, and maintaining the organization's information security program. This role serves as the primary subject matter expert on cybersecurity strategy, risk management, compliance, and incident response. The Manager of Security works cross-functionally to protect company data, systems, and infrastructure against evolving threats while ensuring alignment with business objectives and regulatory requirements. Other tasks may also be required from time to time, at the discretion of management, in order to achieve department and company objectives. This potion will also require team leadership, support, and training for the Infrastructure, IT Support, and Development teams."
Note typo "potion". Keep as is.
Responsibilities: Essential Duties And Responsibilities sections broken into categories.
We need to preserve all details. Let's list each bullet as a sentence or group.
From text:
Security Strategy, Architecture & Governance
- Develop and maintain the enterprise information security strategy, policies, standards, and procedures.
- Define and enforce security frameworks aligned with industry best practices (PCI-DSS, GDPR, NIST CSF, ISO 27001, CIS Controls).
- Lead the Information Security risk management program, including risk assessments, risk registers, and mitigation planning.
- Report on the security posture of the organization to senior leadership and stakeholders on a regular basis.
- Design enterprise security architecture across infra, apps, APIs, and data
- Lead risk management program and executive reporting (maybe duplicate? Actually appears twice; but we keep as is.)
Infrastructure & Systems Security
- Oversee security configuration and hardening of network infrastructure, endpoints, servers, cloud environments, and identity platforms.
- Partner with IT operations and architecture teams to embed security into infrastructure design and change management processes.
- Manage and optimize security tooling including SIEM, EDR/XDR, firewalls, IDS/IPS, DLP, PAM, and vulnerability management platforms.
- Ensure secure administration of Microsoft Entra ID, Active Directory, and M365 environments including conditional access, MFA, and privileged identity management.
Incident Response & Threat Management
- Own and continuously improve the Incident Response Plan (IRP), including playbooks, escalation paths, and post-incident reviews.
- Lead the investigation and remediation of security incidents, breaches, and threat events.
- Manage threat intelligence feeds and coordinate with external partners, MSSPs, and law enforcement as appropriate.
- Conduct tabletop exercises and simulations to test organizational readiness.
Compliance & Audit
- Ensure compliance with applicable regulatory requirements and frameworks (e.g., SOC 2, CMMC, PCI-DSS, GDPR) as relevant to the business.
- Serve as the primary point of contact for security audits, assessments, and third-party reviews.
- Maintain documentation and evidence required for audits and certifications.
- Manage the vendor and third-party risk assessment program.
Security Awareness & Culture
- Design and administer a company-wide security awareness training program, including phishing simulations.
- Promote a culture of security-first thinking across IT and business functions.
- Serve as a trusted advisor to business units on security requirements for new projects and technologies.
Team Leadership
- Lead, mentor, and develop a team of security analysts and/or engineers.
- Define team goals, performance metrics, and professional development plans.
- Manage relationships with external security vendors, consultants, and managed service providers.
DevSecOps & Application Security
- Embed security into CI/CD pipelines (GitHub Actions / Azure DevOps)
- Implement SAST, DAST, SCA, secrets scanning
- Enforce secure coding (OWASP Top 10)
- Perform threat modeling (STRIDE)
- Secure microservices and supply chain (SBOM)
API & Integration Security
- Secure APIs using OAuth2, OIDC, JWT
- Implement API gateway controls (rate limiting, auth)
- Monitor API traffic and anomalies
Cloud Security (Azure)
- Secure Azure workloads including AKS, Functions, Storage
- Implement Defender for Cloud, Sentinel
- Enforce identity and access governance
Data Security & Governance
- Implement data classification and DLP
- Encrypt sensitive data
- Leverage Microsoft Purview
AI & Emerging Technology Security
- Define security for AI/LLM systems
- Prevent data leakage and model misuse
May be modified from time to time. Other duties, tasks and work may be assigned.
Metrics: (maybe include under Responsibilities as bullet)
- To consistently meet deadlines and objectives as agreed and typically described in quarterly reviews or through other project planning efforts
- To handle ongoing projects and day-to-day demands that are not identified in formal quarterly objectives in a timely and accurate manner
- Adherence to budgets
- Adherence to/achievement of benefits described in project business case (cost/benefit) analyses
- Manager of IT Security will be measured by Security Incidents and Monthly Project Completion.
- KPIs: MTTD / MTTR, Vulnerability remediation SLA, SAST/DAST coverage, Phishing failure rate, Cloud mis-config incidents, API security incidents
Supervisory Responsibilities:
- Supervise the IT security staff, perform employee reviews, manage and track support tasks, and mentor team members into knowledgeable, productive, and proactive IT Security team members.
- Responsible for corporate management chores and tasks currently in existence that come into existence that are generally the responsibility of all managers with direct reports. Examples include but are not limited to writing monthly and yearly reviews, approving timesheets, approving expense reports, etc.
- Positions with direct reports are responsible to hold periodic safety training sessions (currently once a month) with said employees.
- Subject matter will be distributed at the monthly managers’ staff meeting.
- Subsequent to training sessions, managers must forward a confirming Training report to each direct report using the Management Reporting System.
We need to include all these as bullet points under Responsibilities.
Qualifications:
Required:
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field (or equivalent experience).
- 7+ years of progressive IT experience, with 3–5 years in a dedicated security role.
- Demonstrated experience managing enterprise security programs across on-premises and cloud environments.
- Strong knowledge of identity and access management, network security, endpoint protection, and vulnerability management.
- Hands-on experience with Microsoft security technologies (Entra ID, Defender suite, Sentinel, Purview).
- Experience leading incident response efforts and conducting forensic investigations.
- Excellent communication skills with the ability to convey technical risk to non-technical audiences.
Preferred:
- One or more industry certifications: CISSP, CISM, CISA, CEH, Security+, or equivalent.
- Experience with hybrid Active Directory environments and group policy management.
- Familiarity with SIEM platforms (Microsoft Sentinel, Splunk, etc.) and SOAR automation.
- Experience supporting compliance programs (SOC 2, PCI-DSS, ISO 27001, or similar).
- Prior experience in manufacturing, distribution, or industrial environment is a plus.
Knowledge & Skills Required (Skills):
- Ability to: Monitor and plan for the security of complex systems and to provide IT teams with recommended security configurations to be consistent with company policies/procedures to ensure compliance; communicate technical/complex information both verbally and in writing; establish and maintain cooperation, understanding, trust and credibility; perform multiple tasks concurrently and respond to emergency situations effectively.
- Work independently with little or no supervision
- Ability to multi-task
- Ability to work at fast pace
- Attention to detail
- Ability to problem solve
- Strong writing and communication skills
- Sensitivity to user needs
- Interpersonal skills are a must
- Must be thorough
We could format as bullet list.
Benefits:
- Radwell offers a comprehensive benefits package including health, dental, and vision coverage.
- The Company provides company sponsored short-term and long-term disability benefits, as well as $50,000 in Life insurance.
- These benefits, along with additional voluntary benefits, are available to all regular full-time employees beginning on first day of employment.
- All employees are automatically enrolled at 3% into the Company’s 401(k) Plan on the first of the month following 90 days of continuous employment.
- Employees
About the role
[Job Summary text]
Responsibilities
- ... ...
Qualifications
Required: ...
Preferred: ...
Or we could use- for each.
But instruction: Use
- for any list of duties/requirements/benefits. For qualifications, it's a list of requirements; we can use
- .
Similarly for Skills.
For Benefits: list.
For Pay: maybe just
with salary range and bonus. For Schedule:
with schedule details. Let's extract content. Job Summary: "The Manager of IT Security is responsible for developing, implementing, and maintaining the organization's information security program. This role serves as the primary subject matter expert on cybersecurity strategy, risk management, compliance, and incident response. The Manager of Security works cross-functionally to protect company data, systems, and infrastructure against evolving threats while ensuring alignment with business objectives and regulatory requirements. Other tasks may also be required from time to time, at the discretion of management, in order to achieve department and company objectives. This potion will also require team leadership, support, and training for the Infrastructure, IT Support, and Development teams." Note typo "potion". Keep as is. Responsibilities: Essential Duties And Responsibilities sections broken into categories. We need to preserve all details. Let's list each bullet as a sentence or group. From text: Security Strategy, Architecture & Governance - Develop and maintain the enterprise information security strategy, policies, standards, and procedures. - Define and enforce security frameworks aligned with industry best practices (PCI-DSS, GDPR, NIST CSF, ISO 27001, CIS Controls). - Lead the Information Security risk management program, including risk assessments, risk registers, and mitigation planning. - Report on the security posture of the organization to senior leadership and stakeholders on a regular basis. - Design enterprise security architecture across infra, apps, APIs, and data - Lead risk management program and executive reporting (maybe duplicate? Actually appears twice; but we keep as is.) Infrastructure & Systems Security - Oversee security configuration and hardening of network infrastructure, endpoints, servers, cloud environments, and identity platforms. - Partner with IT operations and architecture teams to embed security into infrastructure design and change management processes. - Manage and optimize security tooling including SIEM, EDR/XDR, firewalls, IDS/IPS, DLP, PAM, and vulnerability management platforms. - Ensure secure administration of Microsoft Entra ID, Active Directory, and M365 environments including conditional access, MFA, and privileged identity management. Incident Response & Threat Management - Own and continuously improve the Incident Response Plan (IRP), including playbooks, escalation paths, and post-incident reviews. - Lead the investigation and remediation of security incidents, breaches, and threat events. - Manage threat intelligence feeds and coordinate with external partners, MSSPs, and law enforcement as appropriate. - Conduct tabletop exercises and simulations to test organizational readiness. Compliance & Audit - Ensure compliance with applicable regulatory requirements and frameworks (e.g., SOC 2, CMMC, PCI-DSS, GDPR) as relevant to the business. - Serve as the primary point of contact for security audits, assessments, and third-party reviews. - Maintain documentation and evidence required for audits and certifications. - Manage the vendor and third-party risk assessment program. Security Awareness & Culture - Design and administer a company-wide security awareness training program, including phishing simulations. - Promote a culture of security-first thinking across IT and business functions. - Serve as a trusted advisor to business units on security requirements for new projects and technologies. Team Leadership - Lead, mentor, and develop a team of security analysts and/or engineers. - Define team goals, performance metrics, and professional development plans. - Manage relationships with external security vendors, consultants, and managed service providers. DevSecOps & Application Security - Embed security into CI/CD pipelines (GitHub Actions / Azure DevOps) - Implement SAST, DAST, SCA, secrets scanning - Enforce secure coding (OWASP Top 10) - Perform threat modeling (STRIDE) - Secure microservices and supply chain (SBOM) API & Integration Security - Secure APIs using OAuth2, OIDC, JWT - Implement API gateway controls (rate limiting, auth) - Monitor API traffic and anomalies Cloud Security (Azure) - Secure Azure workloads including AKS, Functions, Storage - Implement Defender for Cloud, Sentinel - Enforce identity and access governance Data Security & Governance - Implement data classification and DLP - Encrypt sensitive data - Leverage Microsoft Purview AI & Emerging Technology Security - Define security for AI/LLM systems - Prevent data leakage and model misuse May be modified from time to time. Other duties, tasks and work may be assigned. Metrics: (maybe include under Responsibilities as bullet) - To consistently meet deadlines and objectives as agreed and typically described in quarterly reviews or through other project planning efforts - To handle ongoing projects and day-to-day demands that are not identified in formal quarterly objectives in a timely and accurate manner - Adherence to budgets - Adherence to/achievement of benefits described in project business case (cost/benefit) analyses - Manager of IT Security will be measured by Security Incidents and Monthly Project Completion. - KPIs: MTTD / MTTR, Vulnerability remediation SLA, SAST/DAST coverage, Phishing failure rate, Cloud mis-config incidents, API security incidents Supervisory Responsibilities: - Supervise the IT security staff, perform employee reviews, manage and track support tasks, and mentor team members into knowledgeable, productive, and proactive IT Security team members. - Responsible for corporate management chores and tasks currently in existence that come into existence that are generally the responsibility of all managers with direct reports. Examples include but are not limited to writing monthly and yearly reviews, approving timesheets, approving expense reports, etc. - Positions with direct reports are responsible to hold periodic safety training sessions (currently once a month) with said employees. - Subject matter will be distributed at the monthly managers’ staff meeting. - Subsequent to training sessions, managers must forward a confirming Training report to each direct report using the Management Reporting System. We need to include all these as bullet points under Responsibilities. Qualifications: Required: - Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field (or equivalent experience). - 7+ years of progressive IT experience, with 3–5 years in a dedicated security role. - Demonstrated experience managing enterprise security programs across on-premises and cloud environments. - Strong knowledge of identity and access management, network security, endpoint protection, and vulnerability management. - Hands-on experience with Microsoft security technologies (Entra ID, Defender suite, Sentinel, Purview). - Experience leading incident response efforts and conducting forensic investigations. - Excellent communication skills with the ability to convey technical risk to non-technical audiences. Preferred: - One or more industry certifications: CISSP, CISM, CISA, CEH, Security+, or equivalent. - Experience with hybrid Active Directory environments and group policy management. - Familiarity with SIEM platforms (Microsoft Sentinel, Splunk, etc.) and SOAR automation. - Experience supporting compliance programs (SOC 2, PCI-DSS, ISO 27001, or similar). - Prior experience in manufacturing, distribution, or industrial environment is a plus. Knowledge & Skills Required (Skills): - Ability to: Monitor and plan for the security of complex systems and to provide IT teams with recommended security configurations to be consistent with company policies/procedures to ensure compliance; communicate technical/complex information both verbally and in writing; establish and maintain cooperation, understanding, trust and credibility; perform multiple tasks concurrently and respond to emergency situations effectively. - Work independently with little or no supervision - Ability to multi-task - Ability to work at fast pace - Attention to detail - Ability to problem solve - Strong writing and communication skills - Sensitivity to user needs - Interpersonal skills are a must - Must be thorough We could format as bullet list. Benefits: - Radwell offers a comprehensive benefits package including health, dental, and vision coverage. - The Company provides company sponsored short-term and long-term disability benefits, as well as $50,000 in Life insurance. - These benefits, along with additional voluntary benefits, are available to all regular full-time employees beginning on first day of employment. - All employees are automatically enrolled at 3% into the Company’s 401(k) Plan on the first of the month following 90 days of continuous employment. - Employees