Security and Compliance Manager

About the role

We are looking for an experienced Security and Compliance Manager who will ensure that our data privacy policies, operations, and systems comply with all relevant state and federal laws and best cybersecurity practices. Reports to the Director of IT.

Responsibilities

• Improve the organization’s security and compliance procedures
• Conduct risk assessments and audits to establish the effectiveness of current security systems
• Minimize the impact of potential security breaches and incidents
• Develop and maintain the organization’s security architecture in collaboration with the IT department
• Perform timely security audits
• Review and update current information security and privacy policies
• Create and oversee the implementation of new security and compliance policies and procedures
• Carry out regularly scheduled security functions, including network scans, vulnerability scans, and security-log reviews
• Conduct assessments and audits to measure the efficiency of compliance and security systems
• Evaluate and document disaster recovery programs to ensure effective response to security incidents and breaches
• Advise the Director of IT and other executives on strategies for optimizing the security of data systems, information assets, and business processes
• Keep up to date with external security and compliance regulations and best practices to lead continuous improvement of internal policies and procedures
• Conduct regular training sessions and workshops to educate employees about the latest information security and compliance policy updates
• Collaborate with vendors to ensure proper data handling security measures and adherence to licensing requirements
• Report security breaches to management for prompt resolution

Education

• Bachelor’s degree in Business Administration, IT, Human Resources, or a related field

Experience

• 5 years of experience in a Compliance, Risk Management, or Cybersecurity role
• Preferably 2 years of experience as a Compliance Manager or in a related supervisory role
• Strong understanding of information security and privacy standards and best practices related to data confidentiality
• In-depth knowledge of industry-relevant data security and compliance regulations
• Experience in IT auditing practices
• A CISSP certification will be considered a plus

Travel

Some travel may be required for meetings, company sites, training, and auditing.