We are currently looking for a Full Time Sr. Manager, IT Security to join our IT Security Section team located at the Information Technology working .
Summary:
Provides vision, leadership, and oversees implementation for IT security-related endeavors including IT security operations, architecture & engineering. Responsible for management of IT security services to support confidentiality, integrity, and availability of information technology resources and data.
Responsibilities:
* Provides first class customer service to both internal and external customers and responds to inquiries, compliments, and/or complaints with professionalism, courtesy, and efficiency
* Completes all training and development requirements and participates in continuing education opportunities
* Works in a collaborative and supportive manner to support the productivity and safety of the work area, team members and customers of all types
- Maintains a clean, organized work area and ensures a safe environment
- Maintains and promotes professionalism
- Punctual and consistent in meeting start time, work schedule, attendance and other assigned work time metrics
- Adheres to Chickasaw Nation dress code standards
* Maintains knowledge of and follows all rules, regulations, policies and guidelines for assigned area
* Participates in determining IT Security strategic planning and manages IT security resources and personnel
* Provides daily leadership for information security activities and personnel including hands on involvement as necessary to ensure achievement of objectives
* Assess knowledge, skills, and abilities of IT security personnel and participate in the career development of assigned personnel
* Leads security incident response activities by managing resources to effectively respond to and resolve security incidents
* Oversees investigations of suspected misuse of IT resources, possible breaches, unauthorized disclosure, unauthorized access, and other security issues
* Manages security and forensic investigations according to best practices. Applies appropriate chain of custody and evidence preservation methods to support admission of digital evidence in legal proceedings
* Coordinates IT security assessments and develop prioritized remediation plans as necessary
* Conducts security briefings on risks, threats, and best practices
* Identifies obstacles preventing compliance with information security standards and drive the issue resolution process
* Ability to perform as a "player/coach" performing both as a manager and as well as a security professional in the execution of job duties
* Develops and updates IT security policies, procedures, standards, and security plans
* Maintains knowledge of currently evolving security threats and trends required to bring timely remediation to critical vulnerabilities and proactively mitigate security risks
* Communicates and reports on significant security events and incidents to include management summaries and technical briefings appropriate for different audiences
* Coordinates with stakeholders regarding IT security related initiatives and issues
* Performs all other duties as assigned
Competencies:
Essential:
* Ability to explain analytic and/or IT concepts/requirements to technical and non-technical audiences, and to convey information effectively in verbal and written communication, and group meetings/presentations
* Possesses strong written and verbal communication abilities
* Able to follow instructions, both written and oral
* Able to adhere to all scheduling and attendance requirements
* Good driving record and be insurable by the Chickasaw Nation
* Honesty, truthfulness, reliability, accountability
* Experience with IT functions and technologies across Hardware/Data Centers, Software applications, Cyber Security, etc.
* Able to read, understand, apply, and retain knowledge of Chickasaw Nation, departmental, divisional and all other rules, regulations, policies, procedures and guidelines
* Proficient in establishing IT services framework and IT security policies
* Technical knowledge beyond general controls including breadth of knowledge to support IT Governance, IT Security, application security and access, network security, and database audits
* Knowledge of operational objectives
* Proficiency in security technologies, surveillance systems, access control systems, and emergency response protocols
* Able to verbally communicate in a professional and positive manner with other team members, departments, guests and management
Skills:
Experience:
Nonessential:
* 1 year directly related management experience
Education:
Essential:
* High School, GED or Equivalent
Nonessential:
* Bachelors Degree in directly related field
Nonessential:
* Bachelor's degree in Computer Science, Cyber Security or related area
Credentials:
Essential:
* Certified Information Systems Security Professional
* Pass gaming background check
* Gaming license or permit as required by assigned position
* CN Core Leadership Level 1
Nonessential:
* Control Objectives for information and related technologies
* Professional Certified Investigator
Essential:
* This position requires completion of level one Core Leadership Training within 12 months of the hire or promotion date
Working Conditions:
Essential:
* Must be able to sit or stand for long periods
* Computers, printers, phones
* Subject to traveling and working at other locations or in other environments
* Requires grasping, repetitive motions, manual dexterity, and hand-eye dexterity
* Listening and hearing ability
* Visual acuity for detail, distance, color, depth perception
* Sometimes lift and or carry up to 15 lbs
* Works in an office setting
* Work is performed at facilities across the Chickasaw Nation
* Pass pre-employment drug test
Training
*It is the responsibility of each employee to attend required training for their position or profession as determined by their line of support (LOS) or the leadership of the Chickasaw Nation. It is the responsibility of those who supervise, manage or otherwise lead employees or teams to ensure each employee has access to and receives all required training.
