Information Security Manager

Salary Range

USD $105,000.00/Yr. - USD $120,000.00/Yr.

Overview

The Job in a Nutshell:

The Information Security Manager (ISM) coordinates the IT organization's technical activities to implement and manage the security posture, and to provide regular status and service-level reports to management. The ISM is a leadership role that requires an individual with a strong technical background, as well as an ability to work with the regional and group IT organizations and business management to align priorities and plans with key business objectives. The ISM will act as an empowered representative of the IT Management during IT planning initiatives to ensure that security measures are incorporated into strategic IT plans and that service expectations are clearly defined. The ISM will also be responsible for working with business and IT stakeholders to balance real-world risks with business drivers such as speed, agility, flexibility, and performance.

 

Applications are accepted by the date below, which may be updated if the hiring timeline is extended.

1/17/2025

Responsibilities

Main Ingredients:

Responsible for the following items:

Work with IT Management to implement the security program and security projects that address identified risks and security requirements.

Monitor and report on compliance with security policies, as well as the enforcement of policies within the IT department. Propose enhancements to improve the overall security posture.

Manage the process of gathering, analyzing, and assessing the current and future threat landscape, as well as providing Management with a realistic overview of risks and threats in the enterprise environment.

Work with IT Management to develop budget projections based on short- and long-term goals and objectives.

Assist business owners and IT staff in understanding and the remediation of security findings identified through testing and audits.

Coordinate security communication, awareness, and training for the organization, from senior leaders to operational levels.

Work with IT teams to ensure that security is factored into the evaluation, selection, testing, installation and configuration of hardware, applications, and software.

Work with the legal and purchasing departments to ensure mutually acceptable contracts and service-level agreements, in alignment with the organization’s information security policies.

Coordinate the implementation of technical controls to support and enforce defined security policies. Recommend additional controls as appropriate.

Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.

Manage and coordinate operational components of incident management, including detection, response, and reporting.

Effectively communicate successes and progress of the security program.

Provide support and guidance for legal and regulatory compliance efforts, including audit support.

Although this is a general outline of job responsibilities all employees are expected to be “hands on” and do whatever it takes to get the job done and make the company thrive.

Qualifications

Recipes for Success:

A minimum of seven years of IT experience, with five years in an information security role.

Security audit and compliance experience a plus.

Experience in a supervisory capacity a plus.

A bachelor's degree in computer science, information systems or related field a plus.

Some industry security and audit certifications (ie. CISA, SSCP, CCSP, CISSP, etc.)

Strong leadership skills and the ability to work effectively with business managers, IT engineering and IT operations staff.

A strong understanding of the business impact of security tools, technologies, and policies.

Strong leadership qualities and ability to work in teams.

Excellent verbal, written and interpersonal communication skills, ability to communicate effectively to both the IT organization business personnel.

In depth understanding of information security concepts, protocols, industry best practices and strategies.

Experience developing and maintaining policies, procedures, standards, and guidelines.

Experience applying common information security management frameworks, including the CIS v8.0 controls and the CIS-RAM.

Experience with other IT management frameworks and standards (ie. COBIT, NIST, ISO)

Experience with regulatory compliance standards and regulations (ie. SOx, PCI)

Dedicated to providing outstanding customer service to our employees, stores, and customers

Self-driven / Self-motivated

Maintains a positive and supportive attitude when communicating with others

Updates job knowledge by participating in educational opportunities; reading professional publications; maintaining personal networks; participates in professional organizations

Some travel may be required

Other job duties as required

 

This job description is not an employment contract: it does not guarantee you a job or that the above listed duties are the limit of your responsibilities.  Your job and job description are subject to change with and without notice.  You are required to accomplish all tasks assigned to you by your supervisor and/or other Store Support Center supervisors that may not be listed in this job description.

 

Here’s an overview of the benefits we offer our good4u Crew to help ensure the health and wellbeing of you and your family, now and well into the future:

  

All Crew Members

• Birthday Bonus Pay 
• Vitamin Bucks (up to $2,080 earned as store credit annually) 
• Holiday Pay for 5 Holidays – Stores Closed
• Paid Time Off (sick days and vacation) that Increases with Tenure 
• Paid Nutrition Education 
• good4u Crew Member Discount  
• {N}power Program (customer appreciation and rewards program) 
• Regular, Scheduled Pay Increases  
• Advancement Opportunities and Career Development 
• Health and Wellness Program  
• Employee Assistance Program (EAP)   
• Employee Referral Program

 

Full-Time Crew Members (30+ hours/week)

• Medical, Dental and Vision Insurance 
• Paid Parental Leave  
• Paid Medical Leave (through company paid short-term disability insurance) 
• Company Paid Short-Term Disability Insurance  
• Company Paid Life Insurance 
• Voluntary Benefits Including Hospital Indemnity, Accident Insurance, Long-Term Disability Insurance, Term Life Insurance   
• Retirement Savings Plan (401k) with discretionary Company Match  
• Healthcare and Dependent Care Flexible Spending Account (FSA)  
• Health Savings Account (HSA) with Company Match 

Diversity Statement

At the heart of Natural Grocers' commitment to our community and crew is this belief: All people should be empowered to experience health and wellbeing! We cannot be true to this conviction without honoring diversity and cultivating inclusion throughout every aspect of our organization.

At Natural Grocers, we honor our differences, embrace diversity, and cultivate inclusion because both individual and societal health are rooted in these principles. Our Crew is diverse not only in gender, race, ethnicity, sexual orientation, religion, abilities, and age but also in cultural backgrounds, thoughts, and ideas. Celebrating our diversity refreshes, expands, and shapes our perspective, energizing our mission of equitable access to health and wellness for all. We welcome everyone who would like to join us in this mission, with gratitude for the unique life experience each person brings to the table. We’re committed to nurturing an ecosystem of diversity and inclusion in which our Crew can continue to thrive.

 

Physical Capabilities and Environmental Demands:

 

 

N = Never

O = Occasional; 1-33% of time

F = Frequent; 34-66% of time

C = Constant; 67-100% of time

 

Physical Requirements:

• Must have the ability to occasionally lift or carry up to 50 lbs.
• Must have the ability to occasionally push or pull up to 30 lbs.
• Must be able to constantly use the computer for data entry and use of mouse.
• Must be able to constantly sit, use fine motor manipulations, and reach outward for the duration of the work shift.
• Must be able to frequently grip, bend, twist, and turn.
• Must be able to occasionally walk, stand, squat, kneel, and reach above chest as needed.

 

Environmental Requirements:

• Must be able to work occasionally with cold, heat, sharp tools and equipment, noise, contact stress, dust, fumes, and congested worksite.