Sign upLog in
Information Security Jobs in Norfolk, VA

IT Manager, Cyber Security Services

Hampton Roads Transit

Norfolk, VA

Apply
JOB DETAILS
SALARY
$109,058–$141,775 Per Year
JOB TYPE
Full-time
SKILLS
Analysis Skills, Auditing, Best Practices, Budget Management, CSS (Cascading Style Sheet), Cadence, Capital Expenditure (CAPEX), Computer Networks, Computer Security, Control Objectives for Information and related Technology (COBIT), Corporate Policies, Corrective Action, Endpoint Security, Federal Laws and Regulations, Firewalls, Forensic Accounting, HIPAA (Health Insurance Portability and Accountability Act), ISO (International Organization for Standardization), ITIL (IT Infrastructure Library), Incident Response, Industry Standards, Information Technology/Systems Audit, Information/Data Security (InfoSec), Internet Security, Maintain Compliance, Management of Information Systems/Technology (MIS), Network Monitoring, Operating Systems, Operations Security (OPSEC), PCI, Privacy Controls, Protective Services, Purchasing/Procurement, Records Management, Regulations, Risk, Risk Analysis, Security Attacks, Security Compliance, Security Information and Event Management (SIEM), Security Monitoring, Security Protocols, Software Patches, Staff Training, State Laws and Regulations, Team Lead/Manager, Technical Support, Training/Teaching, Trend Analysis, U.S. National Institute of Standards and Technology (NIST), Vendor/Supplier Management
QUALIFICATIONS
RESPONSIBILITIES

Required Knowledge, Abilities and Skills essential to Job Functions:

  • Bachelor’s degree in computer science, information technology, or related field.
  • 10+ years of experience in IT security, including 5+ years in a management or lead role.
  • Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) Certification or similar certification.
  • Experience with a diverse body of technical cyber tools and software.
  • In-depth knowledge of cyber security principles and best practices.
  • Experience developing and implementing security policies and procedures.
  • Demonstrated Experience in Network Engineering.
  • Project management experience.
  • Certification in CompTIA Security+.
  • Ability to effectively present information and respond to questions from senior management, groups of managers, clients, and internal and external customers.
  • Ability to handle multiple tasks simultaneously and meet multiple deadlines.
  • Excellent written and verbal communication skills.

 

Required Software Knowledge and Skills essential to Job Functions:

Proficiency in using computer systems and the listed software applications associated with performance of assigned work is essential. Basic problem-solving skills associated with software applications used is expected. Software usage relevant to job duties will be evaluated.

 

Software applications:

  • Strong background in Windows security management and security architecture.
  • Background in application security analysis, design, and testing.
  • Experience in network traffic flow monitoring and analysis tools.
  • Experience in log aggregation and analysis tools.
  • Experience with vulnerability assessment tools.
  • Experience with endpoint protection tools.
  • Experience with Internet of Things / Operational Technology security.
  • Experience with a diverse suite of cyber and network tools.
  • Experience with physical security access control systems and video surveillance systems.

 

Safety Responsibility:

Perform all job duties and responsibilities in a safe manner to protect one’s self, fellow employees, and the public from injury or harm. Promote safety awareness and follow safety procedures and policies. Take an active part in reporting unsafe conditions and any hazards within the workplace to their Supervisor, Manager and/or the Safety Department.

 

Training and/or Education:

BS or higher in Computer Science, Information Technology Systems, or related field.   

 

Required Experience:

5-10 years in Information Technology field, 2+ years in IT Security Lead role, Leadership/ Management experience preferred. 

 

Licenses or Certificates:

Possess a valid Driver's License.  Acquire a Virginia Driver's License within 60 days after the date of hire (in instances when an out of state license is not the applicant's current state of residence).

 

Special Requirements:

This position is classified as essential personnel.

 

FLSA Status:

Non-exempt

 

Physical Demands:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

 

Unusual Demands: 

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Work involves meeting multiple demands on a timely basis. Duties may require some overtime.              

BENEFITS
Paid Time-Off, Life Insurance, Retirement / Pension Plans, Paid Sick Days, Flexible Spending Accounts, Medical, Dental, Vision
LOCATION
Norfolk, VA
POSTED
2 days ago

The Manager of Cyber Security Services (CSS) will be hands-on and responsible for management of HRT’s information security and compliance related activities including the following: 

  • Utilizing a risk-based approach to manage information security related aspects of HRT’s operations. 
  • Assuring compliance with information security, privacy, and industry standards and regulations. 
  • Designing, establishing, and maintaining reasonable organizational cyber security and information privacy postures. 
  • Implementing the NIST Cybersecurity Framework within the organization to improve cyber resilience. 
  • In coordination with key stakeholders, this position communicates, prepares for, and responds to geopolitical, international, and national cyber threats from an Agency perspective.

 

This role is responsible for ensuring HRT’s systems are secure, are compliant as per established regulatory frameworks, and audited as per established cadence.

 

Essential Job Functions:

(Duties listed are not intended to be all inclusive nor to limit duties that might reasonably be assigned.)

  • Works with CIO/CTO to define, implement and maintain corporate information and operations technology security policies, procedures, and guidelines based on industry best practices that are compliant with federal and state regulations.
  • Maintaining awareness of new cyber threats, vulnerabilities, and technologies to keep the organization secure.
  • Conducting risk assessments to identify potential security threats and vulnerabilities.
  • Monitoring network activity to identify signs of intrusion or compromise.
  • Providing technical support for computer networks, including firewalls, operating systems and applications, patch management, and data security best practices.
  • Manage HRT’s security tool suite in including endpoint protection, vulnerability assessment, log aggregation and analysis.
  • Training staff on information security best practices to ensure compliance with company policies.
  • Conducting audits to ensure security protocols are being followed by staff.
  • Providing training in information security best practices to employees.
  • Working knowledge with industry standards such as HIPAA, ITIL, NIST, SANS, COBIT, OWASP, and ISO. 
  • Own the entire IT audit process for SOC & PCI reporting across the enterprise.
  • Responsible for leading vulnerability audits, forensic investigations, and mitigation procedures. 
  • Responds immediately to security-related incidents, leads response team, and provides post-event analysis. 
  • Evaluate new cybersecurity threat and IT trends and develop effective security controls. 
  • Evaluate potential security breaches, coordinate response, and recommend corrective actions. 
  • Monitor compliance with security policies and procedures.
  • Investigate security breaches and incidents.
  • Coordinate incident response activities.
  • Train and educate employees on security awareness.
  • Manage security vendors and service providers.
  • Take proactive role is procurement process from the cyber security perspective.
  • Manage department budget, take part in annual capital expenditures planning exercises.
  • Manage records created and received in compliance with the Hampton Roads Transit Records Management Policies and Procedures.
  • Performs all other related duties as assigned.

About the Company

H

Hampton Roads Transit

Hampton Roads Transit (HRT) is the regional provider of public transportation in Hampton Roads Virginia serving the cities of Chesapeake, Hampton, Newport News, Norfolk, Portsmouth and Virginia Beach. HRT is governed by the Transportation District Commission of Hampton Roads. HRT operates local bus routes, light rail in Norfolk, express bus commuter service for the region, passenger ferry service across the Elizabeth River, ADA Paratransit service, and commuter alternate programs under the "goCommute" brand.

HEADQUARTERS
Hampton, Virginia, US
INDUSTRY
Travel, Transportation and Tourism

Resume Resources

Free Resume TemplatesFree Resume Builder

Similar Job Searches

Information Security Manager Jobs in Portsmouth, VARemote IT JobsEntry Level IT Jobs