Senior Manager, IT Security Operations

About Audubon

The National Audubon Society is a leading nonprofit conservation organization with 120 years of science-based, community-driven impact, dedicated to protecting birds and the places they need, today and tomorrow. Birds are powerful indicators of our planet’s health, acting as sentinels that warn us of environmental change and inspire action. Audubon works across the Western Hemisphere, driven by the understanding that what is good for birds is good for the planet. Through a collaborative, bipartisan approach across habitats, borders, and the political spectrum, Audubon drives meaningful and lasting conservation outcomes. With 800 staff and over 1.9 million supporters, Audubon is a dynamic and ever-growing force committed to ensuring a better planet for both birds and people for generations to come. Learn more at and on Facebook, Twitter and Instagram @audubonsociety.

Position Summary :

We are seeking a highly skilled and motivated Senior Manager, IT Security Operations to join our team. As the Senior Manager, IT Security Operations, you will play a crucial role in safeguarding our organization’s assets, ensuring the integrity and confidentiality of sensitive information, and maintaining the overall security posture of our systems and networks.

This position is classified as hybrid preferred. Hybrid employees are expected to work in an Audubon office every Monday and Tuesday and an additional two days each month of the employee’s choosing. Remote work within the United States may be considered only for candidates not within commuting distance of an Audubon office, in accordance with Audubon’s “Where We Work” Policy. Audubon offices include locations in:

Albuquerque, NM; Albany, NY; Anchorage, AK; Baltimore, MD; Charleston, SC; Chicago, IL; Columbia, SC; Fargo, ND; Fort Collins, CO; Lincoln, NE; Miami, FL; New Orleans, LA; New York, NY; Oakland, CA; Palm Desert, CA; Roseville, MN; Sacramento, CA; Salt Lake City, UT; Tallahassee, FL; and Washington, DC.

Compensation:

Salary range based on geo-differentials:

• $109,372 - $123,044  / year   =Albuquerque, NM; Charleston, SC; Columbia, SC; Fargo, ND; Fort Collins, CO; Lincoln, NE; Miami, FL; New Orleans, LA; Salt Lake City, UT; Tallahassee, FL

• $123,041 - $138,421 / year   =Albany, NY; Anchorage, AK; Baltimore, MD; Chicago, IL; Palm Desert, CA ; Roseville, MN; Sacramento, CA; Washington, DC

• $136,718 - $155,808 / year   =New York, NY; Oakland, CA

Additional Job Description

Essential Functions:

•  Security Incident Response:

  • Partner with Chief Technology Officer, Senior Director of Information Technology, and Virtual Chief Information Security Officer (vCISO) to assess and respond to security incidents.

  • Monitor and respond to security alerts and incidents compliant with service level agreements outlined by policy.

  • Investigate, analyze, and document security incidents compliant with “chain of custody” processes, and implement appropriate countermeasures.

• Security Tool and Services Management:

  • Evaluate, procure, administer, and manage security tools and supporting vendor services, including but not limited to password managers, phishing threat management, firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint management, endpoint detection and response (EDR), managed detection and response (MDR), antivirus, document management, and Security Information and Event Management (SIEM) solutions.

  • Regularly monitor, update, and fine-tune security systems to enhance effectiveness.

  • Lead vendor security review process in partnership with vCISO.

• Security Policy and Compliance:

  • Assist in the development, implementation, review, and enforcement of security policies, standards, and procedures guided by ISO 27000 standards.

  • Ensure compliance with industry-specific regulations (e.g., PCI) and standards and coordinate and participate in regular audits.

• Access Control and Authentication:

  • Administer Identity Provider (IdP) to manage user accounts, permissions, and access levels across various systems, following Identity and Access Management (IAM) workflows.

  • Maintain system role mapping documentation and lead and coordinate regular entitlement reviews as necessary.

  • Implement, administer, and manage multi-factor authentication (MFA) and single sign-on (SSO) solutions.

• Vulnerability Management:

  • Oversee scheduled vulnerability scans and penetration tests.

  • Coordinate with relevant teams to remediate identified v