Information Security Manager : NYC, NY : Local

Information Security Manager : NYC, NY :
Local Only

Job Title: Information Security Manager

Location: NYC, NY

Duration: Contract

• Monitor, analyze, and respond to security events and incidents
• Conduct vulnerability assessments and support remediation efforts
• Implement and maintain security controls across applications, systems, and cloud environments
• Support identity and access management processes and security reviews
• Develop and maintain security documentation, standards, and procedures
• Assist with compliance audits, risk assessments, and reporting activities
• Perform other duties as assigned to support NYSERDA’s information security and IT operations

• 4 – 7 years of experience in information security or a related IT discipline
• Bachelor’s degree in Information Security, Computer Science, or a related field
• One or more security certifications such as CISSP, CISM, CEH, Security+, or equivalent
• Cloud security certifications (e.g., Azure Security Engineer, AWS Security Specialty)
• Strong knowledge of cybersecurity principles, tools, and best practices
• Excellent analytical, problem‑solving, and communication skills
• Ability to work independently and collaboratively across teams
• Ability to manage multiple responsibilities and security priorities simultaneously
• Experience supporting security operations in enterprise or public‑sector environments (preferred)
• Leadership/interpersonal skills: collaborate effectively with IT teams, application owners, and business stakeholders; provide guidance and technical expertise to junior staff; exercise sound judgment; demonstrate professionalism and discretion when handling sensitive and confidential information
• Communication skills and external relations: produce clear security documentation, reports, and risk assessments; communicate technical security concepts and risks effectively to both technical and non‑technical audiences; coordinate with external vendors, auditors, and partners during security assessments, audits, or incident response activities

• Security monitoring and SIEM tools (e.g., Splunk, Sentinel, or equivalent)
• Identity and Access Management platforms (e.g., Active Directory, Azure AD)
• Cloud platforms (Azure, AWS)
• Vulnerability scanning and endpoint security tools
• Microsoft Office Suite