Tiffany & Co.

  • IT Security Manager - Security Operations

    Location US-NJ-Parsippany
    Posted Date 5 days ago(1/14/2019 8:58 AM)
    Req #
    38281
    Category
    Information Technology
  • Overview

    Tiffany and Company is currently seeking IT Security Manager for Security Operations in Parsippany, NJ.  This leadership position within the Information Security Team is responsible for developing, overseeing and executing the company’s IT security operations strategy. This role will conduct and oversee staff activities related to technology monitoring, process inspections, configuration assessments and response to or escalation of security incidents as necessary. As a member of the IT leadership team, this Manager will be an expert in the day-to-day activities of the Information Security team and will develop, produce and publish frequent operational security reports.

    Responsibilities

    The IT Security Manager for Security Operations will receive, investigate, and respond to security alerts, leverage security platforms (i.e. SIEM, UBA, DLP, Malware) for the identification of security events, advise and work with security engineering team on rule tuning and performance improvements, and oversee job scheduling and task management for security analysis and scanning tools. S/he will triage observed or suspected security events, engage incident response teams and escalate security incidents as necessary, and oversee event documentation and recordkeeping activities, as well as coordinate digital forensic activities as needed.


    This position will oversee the frequent and systematic vulnerability scanning and penetration testing exercises, coordinate and oversee the reporting of vulnerabilities to key stakeholders, and support and further enhance the enterprise patch management lifecycle. Lastly, the Manager will lead direct reports and cross-function teams in the analysis of various security zones, and champion efforts to pro-actively search for misconfigurations, errors, policy violations and misuse of systems and resources that may result in security incidents.

     

    Qualifications

    • Bachelor's degree in Computer Science, Information Systems or Business Management field of study and/or equivalent experience
    • 6 to 10 years of security operations or relevant Information Security experience
    • Strong knowledge of the functions, relationships and inner workings of a Security Operations Center
    • Strong team leadership and management skills
    • Ability to manage and work effectively with direct and indirect reports
    • Ability to communicate clearly and remain calm in emergency situations
    • Ability to innovate, leverage existing systems for new purposes and find solutions to problems
    • Ability to develop formal processes
    • Demonstrated expertise with event handling procedures
    • Knowledge of and familiarity with security tools used for SIEM, UBA, DLP, Malware Protection, Change Monitoring, vulnerability scanning and patch management
    • Knowledge of forensics and evidence handling procedures
    • Ability to teach incident response procedures to technical and non-technical personnel
    • Ability to measure, document and report on security incidents and trends
    • Ability to summarize security events and present to executives
    • Master’s degree in Cyber Security, Information Assurance or Business Administration field of study preferred
    • Security industry certifications such as CISSP, CCSP, CISM, GSEC, CEH, GIAC or ISSAP preferred
    • Prior experience in security operations within the retail industry preferred
    • Prior experience with security controls in a regulated environment such as SOX, PCI-DSS, and International Privacy Laws preferred

     

     

    #L1-POST7
    #L1-POST7

     

     

    Options

    Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
    Share on your newsfeed