Information Technology Security Manager

The Houston Texans are in a season of growth and are seeking an individual for the position of Information Technology Security Manager. Our Texans Teammate Habits: Dedication to the team Be adaptable Passion for work Win with integrity Own the outcome Culture: Weattract the best and brightest professionals by nurturing core ideals such as character, hard work, discipline, and teamwork. We reward performances and demand a total commitment to excellence and a will to win in everything that we choose to do. Basic Function: Responsible for enterprise cybersecurity programs and activities including data protection, incident response, threat management, vulnerability management, security architecture, security risk management, awareness training, policies and standards. Job Function (Duties & Responsibilities): Work with third party security providers including SOC providers, managed security, MDR, pen testing, vulnerability scan providers, risk assessment and auditors. Develop and enhance governance, information risk, compliance (GRC) and information security programs related to system and data protection efforts across the company. Utilize a risk-based approach to manage information security. Serves as primary cyber-security threat expert keeping apprised of emerging industry trends and strategies to mitigate threats. Maintain and update incident response plans and lead incident response activities. Maintain and update information security policies, requirements, and standards. Develop, enhance and manage the security awareness program including employee phishing and social engineering exercises. Develop innovative ways to provide security awareness. Coordinate software development security code review. Lead the security evaluation of new and existing technologies and standardize system security configurations. Review third party contracts for security and data protection purposes. Participate in BC/DR plans by implementing security best practices. Perform various other tasks that may be assigned from time to time by Vice President and Chief Information Officer. Subject to reasonable accommodations. Position requires routine face-to-face personal interaction with other Club personnel; therefore, job responsibilities must be physically performed in the Club offices and not in a telecommuting manner. Skills Required: Secure network architectures Identity and access management principals Cloud security best practices Risk management frameworks Virtualization technologies Incident response methodology and management Penetration and vulnerability management systems Cybersecurity training programs including phishing, social engineering and compliance Secure coding practices Experience implementing security standards including NIST Cybersecurity Framework, ISO 27000 series, PCI-DSS, HIPAA and CIS Critical Security Controls Strong problem solving, decision-making skills Ability to prioritize and manage multiple tasks in a high-energy environment Ability to document policies, standards, requirements and procedures Ability to maintain confidential and/or proprietary information Display strong interpersonal skills with the ability to create and maintain solid working relationships Education/Experience: Bachelor's degree from a four-year accredited college or university in Computer Science, Management Information Systems or related field required. Minimum three (3) to five (5) years applicable work experience required. Certifications: Certified Information Systems Security Professional(CISSP), Certified Information Security Manager (CISM), Certified Information System Auditor (CISA), Certified Cloud Security Professional (CCSP), preferred. Title: Information Technology Security Manager FLSA Status: Exempt Department: Information Technology Reports to: Vice President and Chief Information Officer Please note that while resumes of all candidates will be considered, as a way for the Texans organization to acknowledge and reciprocate the tremendous support given the Team by local fans and the local community in general, qualified candidates with permanent addresses in the Houston metropolitan and surrounding areas will be given first consideration whenever possible. If your skills and experience match our available position requirements, a Human Resources representative will contact you directly. Due to the volume of resumes received by the Houston Texans, we are unable to provide updates on the status of individual applications. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, age, disability, gender identity, marital or veteran status, or any other protected class. Job Questions: What are your salary requirements? How many years of experience do you have directly related to Information Security? Briefly discuss your role in developing a Governance, Risk and Compliance (GRC) program