The Cybersecurity Project Manager is charged with the responsibility of monitoring and reporting on all security operations and technology solutions/incidents and leading all new project implementations with a cybersecurity mindset. They will be the first responder for security-related incidents, oversee the use of critical security systems such as identity management, IPS, and vulnerability management, actively participate in employee awareness education, analysis of security events that occur on the network or endpoint security, and be a security SME resource for all other IS staff. As the Information Security Project Manager you will be responsible for vendor due diligence to ensure vendors comply with applicable federal/state or Bank rules and regulations. You will Work closely with IT staff to ensure all identified risk and vulnerabilities are mitigated. You will also be responsible for spearheading new developments and researching new technologies, coordinate a diverse team towards organizational goals and budgets, and assigned metrics and timelines to new and ongoing projects.
RESPONSIBILITIES:
- Assist with the development and implementation of information security policies, procedures, and best practices
- Identify and remediate security visibility gaps
- Collect, monitor, and analyze activity of logs, intrusion detection system alerts, firewall logs, network traffic logs, and host system logs
- Daily Security system monitoring - Checking for and responding to alerts in various platforms
- Vulnerability management program oversight - Ensure endpoints are scanned and reported properly. Ensure system admins maintain up to date patching cycles
- Cybersecurity Operations documentation - Document procedures and assist with policy definitions and violation reporting
- Access Control and Authentication auditing
- Assist network and server team with security baselines and configuration validations
- Data and File Access Auditing
- Continue education to remain current in the infosec field
- End Point Security - Oversee the health of endpoint toolset and ensure appropriate alerting
- Security Information and Event Management (SIEM) Tools
- Intrusion Detection and Prevention Systems (IDS/IPS) - Review and adjust policy on IPS as needed
- SSL inspection policy - Define and adjust as needed
- Certificate Authority (CA) Services - Manage the health of internal PKI for use in authentication
- Access Control Requests - Firewall policy adjustments
- Vendor Questionnaires and Due Diligence
- Assist with the development and implementation of new products and services
- Manage projects, assign budgets, metrics and goals
- Negotiate contracts
QUALIFICATIONS:
- 3+ years relevant technical experience
- Project Management experience
- Prior experience with network security and related applications, tools, and solutions required
- Knowledge of firewalls, VMWare, Netgear, Nessus, and Exchange
- Superior communication skills, both oral and written
- Exercise tact, courtesy, and discretion with contacts at all levels
- Polished professionalism including a positive attitude
- Ability to multi-task
- Ability to work within diverse groups
- Possess strong organizational skills and attention to detail
- Critical thinker with strong judgment
- Participate in annual auditing activities
- Familiarity with security and compliance frameworks (CIS CSC, NIST, GDPR, PCI, etc.)
Job Type: Full-time
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Flexible schedule
- Health insurance
- Life insurance
- Paid time off
- Professional development assistance
- Referral program
- Vision insurance
Ability to commute/relocate:
- Knoxville, TN 37919: Reliably commute or planning to relocate before starting work (Required)
Application Question(s):
- What are your salary expectations?
Education:
Experience:
- Information security: 4 years (Preferred)
- Organizational skills: 4 years (Preferred)
- Project management: 4 years (Preferred)
- VMWare: 4 years (Preferred)
Work Location: In person - Knoxville, TN