Security Manager

Overview:

HKS Dallas is seeking a Security Manager.

Leading the Enterprise Security function, this position will contribute to the strategy, design and drive the implementation and operational security agendas needed to prevent, detect and respond to an evolving cyber threat landscape. While protecting the company’s networks, technologies, services, capabilities and data is core to the success of this position, the Security Manager will also partner with internal and external entities to perform audits, reviews, assessments, generate security responses and promote firmwide security awareness and adoption of all approved security, privacy and compliance policies. Manages the firm’s resources (processes and tools) and assignments with proficiency, fluency and aptitude.

Responsibilities:

• Contributes to the development and executes the security strategies needed to enhance security capabilities, integrate new technologies and leverage best practices for addressing emerging threats
• Engineers, implements and advocates for effective security operational standards and controls including but not limited to security monitoring, threat detection, incident response, threat intelligence, vulnerability management, access management, compliance and reporting
• Leads and mentors a team responsible for incident detection, response, mitigation, and retrospection, ensuring adherence to industry standards and best practices
• Manages end-to-end delivery of security projects, coordinating resources and prioritizing tasks to meet organizational objectives
• Collaborates with the technology peers and business functions to review and approve solutions from a security compliance perspective
• Develops and maintains detailed written security standards, policies and procedures consistent with departmental and company guidelines
• Ensures all departmental activities comply with company, regulatory and regional requirements
• Conducts periodic internal and external security and risk audits of systems, data, policies and processes
• Implements administrative and operational safeguards to address identified risks with systems, data, policies and processes
• Acts as the liaison between IT, the business, auditors and others regarding security compliance issues and activities
• Manages deliverables related to regulatory and audit requests
• Fosters collaboration with internal and external stakeholders, promoting security awareness and best practices across the organization
• Establishes and maintains informational dashboards and KPI metrics
• Communicates with management regarding security issues and risks; recommends mitigating actions; and provides notices for breaches in accordance with company and regulatory policy
• Stays current with trending security/risk regulations and privacy laws
• Maintains awareness and leverages advancements in tools and techniques to improve and streamline security operations
• Provide afterhours support as needed for high severity situations
• Perform other duties assigned by leadership

Qualifications:

• B.A./B.S. degree in Computer Science or related field, or equivalent work experience
• Advanced Information Security Certification (CISSP, CISM, or CISA) required
• Typically, 6-8+ years of experience in a relevant information security and security operations role, with typically 5+ years management experience of teams involved in the handling of security events
• Solid risk management experience in technology, information security, and incident management
• Solid experience implementing security across on-premise and cloud distributed environments
• Strong ability to set goals and measures for organizational performance
• Strong analytical skills (technical and non-technical problem-solving skills)
• Proficiency in network, host, database and application security
• Proficiency with Microsoft Azure and AWS cloud services
• Proficiency with Intune, Tenable, Mimecast, Cloudflare, Okta, next-generation EDR & DLP tools and SIEM
• Proficiency with Palo Alto firewall, Prisma and SASE environments
• Experience implementing security controls across domestic and international environments
• Experience managing Office 365 and Azure environments
• Experience with Windows system administration
• Experience driving a culture of security awareness and education
• Experience administering endpoint devices or web application servers
• Experience with logging and alerting platforms, including SIEM integration
• Current understanding of industry trends and emerging threats
• Knowledge of incident response methodologies and technologies
• Strong customer service, interpersonal skills and the ability to interact with all levels of staff
• Strong work ethic and eagerness to produce high quality, accurate results
• Ability to manage team with diplomatic and collaborative leadership style which puts value on relationships and collaboration, both internal and external
• Ability to proactively problem solve and apply innovative solutions
• Ability to work and collaborate in a team environment, and ability to work independently and prioritize work
• Ability to work on multiple projects at the same time
• Ability to effectively meet deadlines at expected quality
• Travel may be required

If you currently work for HKS, please submit your application via the Internal Careers Portal.

HKS is an EEO/AA Employer: M/F/Disabled/Veteran