IT Information Tech - IT Security Manager II ( 100% Remote)

$108,100 - $147,500/Yr

Windstream - Washington, DC

Full-time - Mid Level

Remote - Washington, DC

Telecommunications

About the position

Windstream is seeking an experienced IT Security Manager II to join their Information Security Team. This role is crucial for developing and enforcing security policies, managing vendor risks, enhancing cybersecurity awareness, and ensuring compliance with security standards. The position is fully remote and involves collaboration across various departments to maintain a secure and compliant environment.

Responsibilities

• Assist in developing and implementing policies, procedures, and controls to ensure compliance with laws, regulations, and industry standards.
• Enforce security policies and procedures by administering and monitoring security, investigating security exceptions, and maintaining security controls documentation.
• Identify and assess risks associated with third-party vendor relationships.
• Maintain, track, and report on third-party risks to appropriate stakeholders.
• Review third-party contracts to ensure proper cybersecurity measures are in place.
• Measure and evaluate cybersecurity risks through the creation and continuous maintenance of the Cybersecurity Risk Register.
• Perform initial and periodic information security risk assessments, mitigation, and remediation.
• Develop and maintain a security awareness program to ensure employees act securely, reducing organizational risk.
• Maintain records of data assets and technical data classification standards.
• Maintain a data security incident management plan to ensure timely incident remediation.
• Coordinate IT activities with internal auditors and external assessors, including the selection of external assessors.
• Prepare reports, business cases, and presentations on security risk, controls, and the status of compliance efforts.
• Drive high-profile and high-impact projects solving complex challenges.
• Lead and sponsor projects relating to cybersecurity, ensuring timely and within-budget delivery.
• Maintain and foster key relationships with software vendors and providers.
• Hold vendors accountable for responses, troubleshooting, and solution fixes.
• Stay abreast of technological advances and continuously research better ways to accomplish tasks and integrate new cybersecurity technologies.
• Provide advice on innovative security tools that may offer cost savings, reduce complexity, better meet compliance, or benefit the company.
• Define and report against critical metrics and key performance indicators (KPIs).
• Identify gaps and enhance processes and technology to better align with industry standards and best practices.

Requirements

• Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field.
• One or more of the following certifications are a plus: CISSP, CISM, CISA, GIAC, PMP.
• Familiarity with security industry standards including NIST CSF, NIST Privacy, NIST 800-53, and PCI DSS, with experience working with at least one of these frameworks.
• Experience in business risk analysis and mitigation.
• Proven experience in the design, delivery, and management of enterprise-level security programs and technologies.
• Experience with GRC platforms/tools and third-party risk assessment tools.
• Strong knowledge of data privacy regulations and guidelines is a plus.
• Excellent analytical and problem-solving abilities.
• Effective communication and interpersonal skills, with the ability to collaborate across departments.
• Proven presentation and facilitation skills.

Nice-to-haves

• Experience with cybersecurity frameworks and compliance standards.
• Knowledge of emerging cybersecurity technologies and trends.

Benefits

• Medical, Dental, Vision Insurance Plans
• 401K Plan
• Health & Flexible Savings Account
• Life and AD&D, Spousal Life, Child Life Insurance Plans
• Educational Assistance Plan
• Identity Theft, Legal, Auto & Home and Pet Insurance