IT Security Manager
- Compensation
- $165K–$200K
- Location
- New York City, US
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Minimum 8-10+ years of hands-on information security experience in enterprise environments with at least 3-5 years in a leadership or management role.
- Strong understanding of security frameworks including NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and SOC 2.
- Bachelor’s degree in computer science, Information Systems, Cybersecurity, or a related field.
- Significant hands-on experience with Microsoft Azure and Microsoft cloud security technologies is required, including Azure security architecture, Microsoft Entra ID, Microsoft Defender, Microsoft Sen
- Professional cybersecurity certification is required. Acceptable certifications include CISSP, CISM, CISA, GIAC GSEC, PCNSE, Microsoft Certified: Azure Security Engineer Associate (AZ-500),
- Candidates who do not have proven Microsoft Azure security experience and at least one relevant cybersecurity certification will not meet the minimum qualifications for this role.
- Extensive knowledge of security is best practices in regard to computer systems, networks, telecommunication and all associated hardware. Very strong analytical approach to problem solving and solutio
Full description
Overview
The IT Security Manager is responsible for managing and overseeing the Firm's information security program, including security operations, governance, risk management, compliance initiatives, security architecture reviews, incident response activities, and third-party security services. The individual will work closely with IT leadership, business stakeholders, and external partners to ensure the confidentiality, integrity, and availability of Firm information assets.
The position requires strong leadership, project management, communication, and cybersecurity expertise. While maintaining a solid technical understanding of security technologies, the primary focus of this role is the management, oversight, and continuous improvement of the Firm's cybersecurity program:
Responsibilities
- Manage Intruder Detection sensors, firewalls, Anti-Virus, Web Filtering Solutions, DLP, IPS/IDS, NAC, DDOS protection, third-party remote access, application-whitelisting solutions, endpoint detection and response solutions.
- Manage Security Incident and Event Management systems (SIEM).
- Manager and investigate all security events until resolution.
- Manage privilege account management systems.
- Conduct technical security audits and perform risk assessments.
- Conduct firewall, network and systems configuration change and audits.
- Perform vulnerability scans on networks, servers, systems and applications.
- Create weekly security reports including keeping track of information security metrics.
- Work with consultants and third-party vendors as it relates to security services they provide.
- Participate in project reviews of information security architectures associated with each initiative.
- Research and test new security technologies.
- Manage and maintain a good relationship with third party security vendors that support Milbank (MSSP, SOC and others).
This is a remote position.
Compensation: -The anticipated base salary range offered for this role will be between $165,000 to $200,000 and represents the firm’s good faith and reasonable estimate of the range of possible base compensation. Actual base compensation will be dependent upon several factors, including but not limited to the candidate’s relevant experience, performance, qualifications, degrees, and location, well as the needs of the firm.
Qualifications
- Minimum 8-10+ years of hands-on information security experience in enterprise environments with at least 3-5 years in a leadership or management role.