Note: The job is a remote job and is open to candidates in USA. The National Audubon Society is a nonprofit conservation organization dedicated to protecting birds and the habitats they need through science-based and community-driven conservation. The Senior Manager, IT Security Operations will safeguard organizational assets and sensitive information by managing security incidents, tools, policies, access controls, vulnerabilities, awareness programs, documentation, and network security. The role also collaborates with technology teams, vendors, management, and stakeholders to maintain and improve Audubon's overall security posture.
Responsibilities
- Partner with Chief Technology Officer, Senior Director of Information Technology, and Virtual Chief Information Security Officer (vCISO) to assess and respond to security incidents
- Monitor and respond to security alerts and incidents compliant with service level agreements outlined by policy
- Investigate, analyze, and document security incidents compliant with “chain of custody” processes, and implement appropriate countermeasures
- Evaluate, procure, administer, and manage security tools and supporting vendor services, including but not limited to password managers, phishing threat management, firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint management, endpoint detection and response (EDR), managed detection and response (MDR), antivirus, document management, and Security Information and Event Management (SIEM) solutions
- Regularly monitor, update, and fine-tune security systems to enhance effectiveness
- Lead vendor security review process in partnership with vCISO
- Assist in the development, implementation, review, and enforcement of security policies, standards, and procedures guided by ISO 27000 standards
- Ensure compliance with industry-specific regulations (e.g., PCI) and standards and coordinate and participate in regular audits
- Administer Identity Provider (IdP) to manage user accounts, permissions, and access levels across various systems, following Identity and Access Management (IAM) workflows
- Maintain system role mapping documentation and lead and coordinate regular entitlement reviews as necessary
- Implement, administer, and manage multi-factor authentication (MFA) and single sign-on (SSO) solutions
- Oversee scheduled vulnerability scans and penetration tests
- Coordinate with relevant teams to remediate identified vulnerabilities
- Curate and oversee security awareness program and portal for employees
- Provide specialized training on best practices for security hygiene
- Oversee phishing test program and remediation training program
- Maintain accurate and up-to-date security documentation, including incident reports, policies, procedures, and configurations
- Collaborate with cross-functional teams to ensure security measures align with overall business objectives
- Communicate security risks and recommendations to management and relevant stakeholders
- Act as lead facilitator of IT Security Operations working group and participate in Architectural Review Board meetings
- Assist cloud and network administration team with configurations and function of servers to limit access, mitigate intrusions, and protect assets
- Assist cloud and network administration team with configurations and topology of network devices to safeguard points of access and data security, including firewalls, routing, and ACLs
- Maintain and foster culture of safety
- Other job-related duties as assigned
Skills
- Bachelor's degree in Information Security, Computer Science, or a related field
- Minimum 8 years of experience with IT operations with progressive experience in cybersecurity in a corporate or non-profit environment. An equivalent combination of education and work experience will also be considered
- Strong knowledge of cybersecurity technologies and best practices
- Proficiency in administering security tools and systems
- Excellent problem-solving and analytical skills
- Effective communication and interpersonal abilities
- Detail-oriented with a focus on accuracy
- Ability to work both independently and collaboratively in a team environment
- Commitment to Audubon's organizational values of care, collaboration, change, integrity, impact, and innovation
- Experience fostering inclusive and collaborative work environments is valued
- Experience with Defender for Endpoint, and Defender for Identity preferred
- Experience with Okta preferred
- Experience with Sonicwall FW hardware preferred
- Experience with distributed network environments preferred
- AWS / Azure / Public cloud expertise preferred
- Experience with SecDevOps best practices preferred
Benefits
- This position is classified as hybrid preferred. Hybrid employees are expected to work in an Audubon office every Monday and Tuesday and an additional two days each month of the employee’s choosing.
- Remote work within the United States may be considered only for candidates not within commuting distance of an Audubon office, in accordance with Audubon’s “Where We Work” Policy.
Company Overview