IT Security Manager at Swagelok Company

Solon, Ohio, United States -

Full Time

Start Date

Immediate

Expiry Date

13 Feb, 26

Salary

0.0

Posted On

15 Nov, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Risk Management, Cyber Security, Data Governance, Incident Response, Vulnerability Assessments, Security Audits, Security Awareness, Data Privacy, Third-Party Vendor Management, Cloud Security, Technical Security Controls, Communication Skills, Problem Solving, Team Leadership, Compliance, Security Strategy

Industry

Industrial Machinery Manufacturing

Description

Swagelok is a global organization and one of the largest employers of manufacturing talent in Northeast Ohio. We are driven by our core values of Quality, Integrity, Respect for the Individual, Customer Focus, Innovation, and Continuous Improvement, which are demonstrated through our daily actions. For over 75 years, our dedication to our core values has been the foundation for our success. Our products have been up into space, down to the bottom of the ocean, and everywhere in between. That same dedication spans to our customers. Throughout our organization we demonstrate a commitment to these values and those we bring onboard. Whether you want to grow in your role or explore broad opportunities and develop new skills—you’ll thrive in a culture that promotes learning and development. We strive to be a company where we all can do our best work with a true sense of purpose and belonging. Be Connected. Be Valued. Be You. We hope you’ll consider joining our team. The IT Security Manager is responsible for directly assessing and holistically executing all aspects of risk brought to bear on the enterprise including legislative/regulatory compliance issues in the areas of cyber security, technology, IT operations, and data. Additionally, the IT Security Manager plans and delivers actions supporting the enterprise IT security strategy. The IT Security Manager is expected to execute the needed security programs and activities. This includes interfacing with peers in the Information Technology departments as well as with the leaders of the business including shop floor, innovation, manufacturing operations, new product development, data and Swagelok Sales and Service locations. The incumbent will share and implement the corporate security vision with key stakeholders and work to achieve higher levels of enterprise and data security. Secondary tasks will include the selection of appropriate IT security partners and solutions in collaboration with the enterprise architects. Essential Duties and Responsibilities: Work with the executive and business managers to align the Information Technology organization with business unit security and compliance needs. Acts as a technical consultant for the enterprise, ensuring security design for systems align with business needs, architecture and technical standards. Develop, institute and maintain an Information Security Strategy Roadmap for all Security Technology domains with input on the strategic direction from the architecture team. Create and maintain the enterprise’s security documents (policies, standards, baselines, guidelines and procedures). Ensure current cyber and data security services encompass the enterprise including new product development, data governance and digital programs. Lead and coordinate incident response to problematic security and data activity, ensuring timely resolution and provide on-going communication with senior management. Run the design and execution of vulnerability assessments, penetration tests and security audits. Ensure regular security awareness and data handling training for all employees to ensure consistently high levels of compliance with enterprise security documents. Conduct/participate in data privacy risk assessments and implement mitigation measures. Oversee and ensure security and data privacy requirements for third-party vendors. Classify and evaluate enterprise data assets in conjunction with the Data Governance team. Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories. Prepares system security reports and KPI by collecting, analyzing, and summarizing data and trends to track and measure the enterprise’s risk posture. Responsible for establishing and leading a high-performance team of security professionals that oversees the proper deployment, configuration, and administration of the security and identify management systems. Approximate # of direct reports – 4 Plan and manage IT Security budget to improve security posture and ensure effective budget utilization. Education and/or Work Experience Requirements: Education College diploma or university degree in the field of computer science and/or 5 years equivalent work experience. One or more certifications in CISSP, CISA, CISM, CIPM or CIPT is preferred. Skills Strong problem solver with excellent oral and written communication skills. Possess the ability to interact with a variety of diverse people in a complex environment. Specific knowledge of risk management principles and models. Experience in audit of legislative and/or regulatory compliance. Strong knowledge of corporate level security systems and implementation procedures, corporate and government security regulations, security software products, domain structures, user authentication, user profiles, and digital signatures. Excellent understanding of cloud security and experience with design and/or implementation of applications in the cloud. Extensive knowledge of technical security controls and technologies (e.g. IDS, IPS and Web Application Firewalls; Data Loss Prevention (DLP); Antivirus, Anti-malware and Zero Day protections; Security Information and Event Management (SIEM); Identify and Access Management and Privileged User Management; Public Key Infrastructure and Certificate management). Working Conditions and/or Physical Requrements: Working conditions associated with normal office environment. Ability to operate standard office equipment (e.g., computer, telephone, copier, printer, etc.). Ability to effectively communicate in both small and large groups and settings. Ability to traverse between multiple locations in Ohio and Pennsylvania as needed. Ability to safely and successfully perform the essential job functions consistent with the ADA, FMLA and other federal, state, and local standards, including meeting qualitative and quantitative productivity standards. Ability to maintain regular, punctual attendance consistent with the ADA, FMLA and other federal, state, and local standards. Swagelok provides a comprehensive package of valuable benefits called Total Rewards focused on health and wellness, compensation, retirement planning, and supplemental rewards. To apply: 1. Click ‘Apply Now’ to the role of interest, upload your resume and complete the application. 2. Those that match our qualifications will be contacted to schedule a phone interview. Congratulations on taking the first step to Be Connected. Be Valued. Be You. Swagelok is proud to be an Equal Opportunity Employer. Applicants are selected without regard to race, ethnicity, creed, color, religion, sex, pregnancy, pregnancy-related medical conditions, age, national origin or ancestry, disability, genetic information, veteran/military status, sexual orientation, gender identity, or other protected characteristic under federal, state or local law. Swagelok will make reasonable accommodations in compliance with the Americans with Disabilities Act of 1990, the Americans with Disabilities Act Amendments Act of 2008, and Ohio state law. This job summary is intended to be brief and does not list all the duties for this position. Nothing in this job description should be construed as an express or implied contract of employment. Swagelok is an at-will employer, which means that either party is free to terminate the employment relationship at any time, without any advanced notice, for any reason or no reason. #LI-LK1 #LI-Hybrid

Responsibilities

The IT Security Manager is responsible for assessing and executing all aspects of risk related to cyber security, technology, IT operations, and data. This role includes planning and delivering actions that support the enterprise IT security strategy and executing necessary security programs and activities.