Information Security Risk Manager

1 month ago

Marlborough, United States firstPRO, Inc Full time

Summary/Objective:

This role will work directly and oversee a team, managing the confidentiality, integrity, and availability as it relates to the credit union’s process, procedures, and systems. Working with the Information Security and Information Systems teams to ensure security best practices in existing and current processes and configurations throughout the organization.

Essential Functions:

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

  • Maintain the credit union’s Information Security Program, including awareness, adherence, and updates to incorporate evolving technology and threat landscapes, in a 24/7/365 Cloud and On-Premises environment
  • Advance, develop, and maintain the IT/Security Risk Management program and activities, and its alignment with the Enterprise Risk Management program
  • Develop, maintain, and communicate policies, standards, procedures, and controls, to manage security functions relative to information technology systems (including systems under development), networks, applications, and voice and data communications that are consistent with applicable legal, regulatory, and compliance requirements
  • Develop and report business-relevant metrics to measure the efficiency and effectiveness of the Information Security Program, facilitate appropriate resource allocation and increase the maturity of the security program
  • Provide subject matter expertise on a broad range of information security standards and best practices, such as related to FFIEC, NCUA, NIST, PCI, and others as applicable
  • Supervise the design and execution of vulnerability assessments, penetration tests and security audits; work with Information Systems and other business areas in the remediation of audit findings
  • Oversee regular security awareness training for all employees to ensure consistently high levels of compliance with the credit union’s security program
  • Facilitate the leading of the credit union’s Disaster Recovery and Business Continuity Plan updating, testing, maintenance, and related activities
  • Provide guidance, where applicable, in the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with the credit union’s security program or standard best practices
  • Oversee, evolve, and audit, the credit union’s Identity and Access Management program, processes, and procedures
  • Participate in root cause analysis of critical events for improving preventative and reactive processes
  • Work with other business areas to explain security concepts, make recommendations, and help drive security initiatives
  • Maintain up-to-date knowledge of the IT security and financial industries, including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors
  • Perform other job-related duties as assigned by Management


Supervisory Responsibility:

Supervises Info Security and IAM teams, which includes Team Leaders, Engineers, and Analysts.

Education and Experience Requirements:

  • Bachelor's Degree in Information Security, Cybersecurity, Information Technology, or related field or experience
  • 1-3 years of supervisory experience
  • Security related certifications, such as CISM, CISSP, CISA, Cloud Security Certifications
  • 5+ years relevant experience in Information Technology or Cybersecurity for Cloud or On-Premises environments at a financial institution or experience in a simiarly heavily regulated industry preferred
  • Experience with CIS Critical Security Controls, NIST 800 and CSF, and FFIEC frameworks, and Financial Institution Regulatory Requirements
  • Experience with managing Microsoft Active Directory, Group Policy, DNS
  • Familiarity with Cloud Security, SIEM, Logs, IDS/IPS, DLP, Web filters, AV, and WAF solutions
  • Troubleshooting, problem solving, documentation and communication skills
  • Knowledge of common protocols such as SNMP, HTTP, HTTPS, SMTP, NTP, LDAP, KERBEROS, RADIUS and FTP
  • Active in the Information Security community, such as groups, conferences, and so on

  • Information Security Risk Manager

    4 weeks ago

    Marlborough, Massachusetts, United States FirstPRO Full time

    Job Summary:This role will oversee the development and implementation of the credit union's Information Security Program, ensuring the confidentiality, integrity, and availability of sensitive data. The successful candidate will work closely with the Information Security and Information Systems teams to ensure security best practices are followed throughout...

  • Security Operations Manager

    4 weeks ago

    Marlborough, Massachusetts, United States Securitas Security Services USA, Inc. Full time

    Job Summary:The Site Manager acts as liaison between Personnel and the client to ensure day-to-day compliance with the requirements of the security service contract. This role requires strong leadership and communication skills to maintain operational control of security services provided to the Client, ensuring compliance with all Securitas Security...

  • Information Security Intern

    3 weeks ago

    Marlborough, United States Cytiva Full time

    What you will do: Perform Information Security analysis to assist in risk assessment and evaluation of enterprise security controls. This includes summarization of findings and recommendation for process improvement. Assist subject matter experts for enterprise and endpoint security controls to effectively maintain and mature their tools. Assist in creation...

  • Senior Information System Security

    4 weeks ago

    Marlborough, United States Raytheon Technologies Full time

    Date Posted: 2024-10-23 Country: United States of America Location: MA801: Marlborough, MA 1001 Boston Post Road Building 2, Marlborough, MA, 01752 USA Position Role Type: Onsite At Raytheon, the foundation of everything we do is rooted in our values and a higher calling – to help our nation and allies defend freedoms and deter aggression. We...

  • Senior Information System Security Officer

    4 weeks ago

    Marlborough, Massachusetts, United States Raytheon Technologies Full time

    About the RoleWe are seeking a highly skilled Cybersecurity Specialist to join our team at Raytheon Technologies. As an Information Systems Security Officer (ISSO), you will play a critical role in ensuring the security and integrity of our classified computing environments.Key ResponsibilitiesAssess and monitor system compliance, auditing, security plan...

  • Cybersecurity Risk Analyst

    4 weeks ago

    Marlborough, Massachusetts, United States Cytiva Full time

    Job Summary:As a Cybersecurity Risk Analyst at Cytiva, you will play a crucial role in assisting our team with information security analysis to evaluate enterprise security controls. This includes summarizing findings and recommending process improvements. You will also assist subject matter experts in maintaining and maturing their tools, as well as...

  • Site Manager

    3 weeks ago

    Marlborough, United States Securitas Security Services USA, Inc. Full time

    Site Manager - Full Time Securitas Security Services is seeking a full-time Site Manager to work at a client site located in Marlborough, MA Applicants must have strong background in both management and security, with great interpersonal, computer, and customer service skills. *Actively seeking candidates with prior military/law enforcement...

  • Security Specialist

    1 month ago

    Marlborough, Massachusetts, United States Security Industry Specialists Full time

    About this position:Department: Retail Location: Marlborough, MA Employment Type:FTAbout us:Security Industry Specialists, Inc. (SIS) is a leading provider of security solutions to top companies and brands. We deliver exceptional services that exceed industry standards. We achieve this through innovation, continuous process improvement, and a commitment to...

  • Senior Information Systems Security Officer

    4 weeks ago

    Marlborough, Massachusetts, United States Raytheon Technologies Full time

    About the Role:Raytheon Technologies is seeking a highly skilled Senior Information Systems Security Officer to join our team. As a key member of our cybersecurity team, you will be responsible for ensuring the security and compliance of our information systems.Key Responsibilities:Conduct regular cybersecurity reviews and assessments to identify...

  • Security Professional

    4 weeks ago

    Marlborough, Massachusetts, United States Target Full time

    Security Specialist Role at TargetAs a Security Specialist at Target, you will contribute to a secure work environment for all team members, temporary workers, vendors, and visitors. Your responsibilities will include executing routines to identify and investigate theft, and helping advance Assets Protection partnerships through professional interaction.Key...

  • Senior Cyber Security Systems Engineer

    4 weeks ago

    Marlborough, Massachusetts, United States Raytheon Technologies Full time

    Job Summary:Raytheon Technologies is seeking a highly skilled Cyber Security Systems Engineer to join our elite Systems Security Engineering (SSE) team for the Systems Directorate in developing solutions to protect the Warfighter's technology advantage.Key Responsibilities:Implement proper cybersecurity controlsInteract with customer to define SSE...

  • Cybersecurity Program Lead for System Security Engineering

    4 weeks ago

    Marlborough, Massachusetts, United States RTX Full time

    About the Role:Raytheon Technologies (RTX) is seeking a highly skilled Cybersecurity Program Lead to join our team. As a key member of our System Security Engineering (SSE) team, you will be responsible for assisting in the development and management of the cybersecurity scope.Key Responsibilities:Assist in the development and management of the cybersecurity...

  • Cyber Security Engineer II

    3 weeks ago

    Marlborough, Massachusetts, United States Doble Engineering Company Full time

    At Doble Engineering Company, we are seeking a skilled Cyber Security Engineer II to contribute to the development and implementation of our comprehensive security strategies. The successful candidate will have a deep understanding of security principles, protocols, and technologies, as well as excellent analytical and problem-solving skills.Key...

  • Cyber Security Engineer Lead for SPY6 P4

    4 weeks ago

    Marlborough, Massachusetts, United States RTX Full time

    Cyber Security Engineer Lead for SPY6 P4We are seeking a highly skilled Cyber Security Engineer Lead to join our team at RTX. As a key member of our Cyber Security team, you will be responsible for leading the development and management of the cybersecurity scope for the SPY6 P4 program.Key Responsibilities:Lead the analysis of issues that directly affect...

  • Cyber Security Manager

    4 weeks ago

    Marlborough, Massachusetts, United States Metric Bio Full time

    In this key role, the Cybersecurity Manager will collaborate with other Cybersecurity leaders to improve processes and tools, ensuring the incident response team is equipped to handle emerging threats.Key Responsibilities:Develop and implement a robust cybersecurity incident response strategy.Provide leadership in crafting and executing incident response...

  • Cyber Security Engineer II

    3 weeks ago

    Marlborough, United States Doble Engineering Company Full time

    Description We are seeking a Cyber Security Engineer II to join our Cyber Security team in Marlborough, MA. This is an exciting opportunity to apply your security knowledge across a range of strategic initiatives and assessments. This role provides an opportunity to apply your technical skills across various security initiatives while collaborating with IT,...

  • Cyber Security Manager

    1 month ago

    Marlborough, United States Metric Bio Full time

    In this key role, the individual will collaborate with other Cybersecurity leaders to improve processes and tools, ensuring the incident response team is equipped to handle emerging threats. You'll manage team operations, offer technical guidance, participate in reviews, and provide feedback. During incidents, you’ll lead the team in responding swiftly,...

  • Cyber Security Manager

    1 month ago

    Marlborough, United States Metric Bio Full time

    In this key role, the individual will collaborate with other Cybersecurity leaders to improve processes and tools, ensuring the incident response team is equipped to handle emerging threats. You'll manage team operations, offer technical guidance, participate in reviews, and provide feedback. During incidents, you’ll lead the team in responding swiftly,...

  • Cyber Security Project Lead

    4 weeks ago

    Marlborough, Massachusetts, United States ViaSat Full time

    About ViasatViasat is a leading provider of global communication services, with a mission to deliver connections that change the world. We're a team of innovators, thinkers, and problem-solvers who are passionate about making a difference.Job SummaryWe're seeking a highly skilled Cyber Security Project Lead to join our team. As a key member of our Cyber...

  • Site Supervisor

    1 month ago

    Marlborough, United States Securitas Security Services USA, Inc. Full time

    The Site Manager acts as liaison between Personnel and the client to ensure day-to-day compliance with the requirements of the security service contract. The Site Manager maintains operational control of security services provided to the Client, ensuring compliance with all Securitas Security standard of cost control, profitability, and quality performance....