IT Regional Security & Compliance Manager for EMCOR Construction Services

$130,000 - $160,000/Yr

EMCOR Group - Phoenix, AZ

Full-time - Mid Level

Phoenix, AZ

10,001+ employees

Construction of Buildings

About the position

The IT Regional Security & Compliance Manager for EMCOR Construction Services is responsible for ensuring compliance with corporate security and IT policies across ECS Operating Companies in the Western US. This role involves providing guidance, oversight, and support on security and IT metrics, as well as working closely with IT personnel to address security and compliance issues. The position requires significant travel to various operating companies and emphasizes building relationships to facilitate compliance and security initiatives.

Responsibilities

• Provide support and guidance to ECS HQ and ECS Operating Companies to ensure compliance with Corporate Security and IT policies.
• Provide guidance, oversight & support on Security & IT metrics to ECS HQ and to ECS Operating Companies, both remotely and on-site.
• Ensure Corporate SOP's are followed by ECS and OpCos.
• Ensure required metrics are met on a timely basis.
• Work with OpCo Executives and IT on needed risk mitigation activities.
• Travel required up to 50% to US-based OpCos focusing on OpCos geographically located in the US West.
• Provide technical support and guidance to subsidiary IT personnel to complete initiatives and mitigate issues.
• Cultivate working relationships with IT administrators and management across a diverse organization to facilitate Security & IT policy compliance.
• Participate in scheduled Security and Compliance meetings with Corporate, Segment and OpCo Security & IT Teams.
• Participate and lead remote and in-person meetings with OpCos reviewing Security metric performance and needs.
• Work remediation tasks as needed with OpCo IT to demonstrate proper metric interpretation and remediation methods both remotely and onsite.
• Coordinate and conduct Security questionnaire response meetings.

Requirements

• Five (5) years of experience working with Security & Compliance in a complex IT environment.
• Three (3) years of experience working across Windows Server and desktop platforms in a complex IT environment.
• Experience with remediation of Security & Compliance issues including CVEs, security alerts from monitored systems and compliance with SOPs.
• Experience with EDR monitoring, deployment and support.
• Experience with MFA, SSO, and other security identity tools such as Okta.
• Experience with CMMC including SSPs and basic assessments, NIST CSF, ISO 27001 and similar standards.
• Strong understanding of information security and privacy standards.
• Proficiency using Microsoft Office including Word and Excel.

Nice-to-haves

• Industry standard certifications (e.g., GIAC, CISSP, CISM) preferred but not required.
• Experience with Autopilot, InTune and similar configuration technology.
• Participation in Security projects and risk mitigation meetings.
• Experience working with different departments in a large enterprise to reduce risk.
• IT support and understanding of IT concepts, application security and mobile device security.
• Microsoft 365 support and use.
• Working experience with Enterprise Security and Compliance tools.

Benefits

• Medical, dental, and vision coverage.
• Flexible spending accounts.
• Life insurance.
• Disability income.
• 401(k) Savings Plans.
• Employee assistance and wellness programs.