Security Manager St. Louis, MO​/Hybrid

Responsibilities

• Manage and deploy patches for servers and user devices.
• Provide guidance and training to staff on security best practices and emerging threats and manage simulated phishing campaigns.
• Monitor and report on the effectiveness of security operations and initiatives to senior management.
• Conduct regular risk assessments and vulnerability analyses to identify and mitigate potential security threats. (including coordination of Penetration Testing)
• Develop, implement, and maintain the overall information security strategy and framework.
• Assist in the development and implementation of security policies, standards, and procedures.
• Manage and respond to security incidents and breaches; assist in conducting root cause analyses and implementing corrective actions.
• Ensure compliance with relevant legal and regulatory requirements, including GDPR, HIPAA, and other data protection laws.
• Collaborate with IT, compliance, and business units to integrate security into all aspects of the organization’s operations.
• Monitor security alerts and incident reports, conducting initial investigations and escalating as necessary.
• Provide IT security support and guidance to employees, addressing security-related queries and incidents.
• Perform regular audits of servers to ensure patch compliance.

• Bachelor’s degree in computer science, Information Security, or a related field. Master’s degree is a plus.
• Minimum of 5 years of experience in IT security management.
• Relevant industry certifications (e.g., CISSP, CISM, CEH).
• Proven experience in managing security operations, including patch management, phishing training, penetration testing, and incident response within a regional scope.
• In-depth knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, NIST, COBIT).
• Strong understanding of network security, encryption, threat modelling, and security incident management.
• Experience with security tools and technologies, including SIEM, IDS/IPS, DLP, and endpoint protection.
• Excellent problem-solving and analytical skills.
• Strong project management and team leadership capabilities.
• Ability to work effectively in a fast-paced, global environment.
• Strong communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.