Security Manager Resume Examples and Templates

Senior Security Manager

• Redesigned and expanded ABC Corp's Offensive Security function, adopting the lead IOT security testing and guidance role, and adding a Penetration Testing and Approved Scanning Vendor scanning function to meet PCI-DSS requirements.
• Aligned risk criticality scoring across the team, improving team reporting efficiency and consistency, business engagement, and resource deployment.
• Created a Penetration Testing framework and introduced a long-term roadmap to reduce Penetration Testing expenditure while increasing coverage across the ABC Corp portfolio.
• Added Red Teaming capabilities to the existing team, enhancing ABC Corp's security posture against potential threats to their Retail and Digital estates.

IT Security Manager

• Led and implemented the HITRUST compliance certification process, from the self-assessment to the validated assessment, and mapped HITRUST to SOC2 Security Controls.
• Evaluated various SIEM products to identify network attacks, malicious behavior, policy violations, and provide comprehensive auditing and reporting capabilities to support regulatory compliance.
• Managed and administered the Device Management System, including ManageEngine, Intune, and JAMF.
• Deployed the first Security Information and Event Management (Wazuh) system across all company devices and servers to enhance security posture.
• Utilized endpoint security systems to implement security policies and prevent data loss.
• Configured and optimized network hubs, routers, and switches, including Cisco Meraki, to ensure network security.
• Implemented and configured LDAP, SSO, and SAML using Jumpcloud (Directory-as-a-service) to streamline identity and access management.
• Managed and administered the VPN server from configuration, maintenance, to granting access to employees.

Information Security Manager

• Worked as an Information Security Manager for ADE space, enabling and ensuring the firm has the right cybersecurity and technology controls in place for 25 applications.
• Provided guidance, best practices, and technical assistance to application development teams in addressing application security issues.
• Helped the team assess and prioritize the remediation program.
• Performed SOX SOD audits for the CCB application and responded to RFIs received from the PWC team.
• Handled the SOX team from CCaaS.
• Collaborated with internal auditors and external teams to address the audits and guide the AD team about the process.

Cybersecurity manager

• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services
• Provide leadership to the enterprise's information security organization
• Partner with business stakeholders across the company to raise awareness of risk management concerns
• Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems
• Designing and implementing data strategies and systems.
• Overseeing the collection, storage, management, quality, and protection of data.
• Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program
• Develop and enhance an information security management framework

Network Security Manager

• Directed heterogeneous internal network, including DNS, email, and user account administration. Acted as company hostmaster and webmaster.
• Performed routine maintenance on customer websites as requested, from simple HTML changes to more complicated ASP coding.
• Designed and managed the company intranet site, including architecting and implementing a web-based Help Desk application to deal with in-house requests for IS/IT.
• Supervised small staff consisting of three sustaining engineers. Implemented security and escalation policies, handled intrusion prevention and detection, implemented user training procedures.
• Directed heterogeneous customer server hosting network and associated servers and procedures, including DNS, scripts, email, database, load balancing, and backup.

Senior Information Security Manager

• Document information related to IT security attacks, threats, risks, and controls.
• Monitor the effectiveness of action plans in addressing information risks.
• Obtain corporate management's endorsement of security policies, standards, and procedures by articulating cost and benefits.
• Perform a comparative analysis of security service performance parameters against security information sources.
• Prepare an information security performance report based on analysis and correlation of information security events.
• Analyse and correlate information security events to identify appropriate event-handling actions.
• Assess operational and implementation costs, and evaluate them against the potential business impact if the policies and controls are not implemented.
• Develop IT security policy and operational procedures based on information collected.
• Develop a documented action plan containing policies, practices, and procedures to mitigate the identified risks.

Information Security Manager

• Rolled out Automox cloud patching and administered vulnerability management program
• Designed IAM architecture and implemented mandatory controls using SAML, JIT, RBAC, and device certificates
• Participated in UAT and signed off on security requirements for new DevOps products
• Provided quarterly updates to the Risk Committee of the Board
• Conducted creative and stimulating InfoSec awareness training
• Built the InfoSec program from the ground up in a highly-regulated industry
• Responsible for all SecOps efforts using hands-on technical expertise in a cloud-first environment
• Led incident response with zero known breaches
• Deployed Azure Sentinel SIEM including integrating AWS CloudTrail and custom data feeds utilizing REST API
• Configured M365 environment per Microsoft recommended settings including AAD Identity Protection, Defender for Cloud Apps, Defender for O365, DLP, and Exchange Online Protection

Supplier Security Manager

• Collaboration with colleagues in Data Protection to ensure reviews comply with GDPR requirements and data transfer rules
• Striking an appropriate balance with senior stakeholders to reach resolution on control deficiencies and delays in evidence receipt
• Manage a team of junior auditors providing situational leadership, allowing future talent to exceed expectations
• Manage the assessment of ACME suppliers' data security controls to determine appropriateness to process personal data or gain access to Sky networks
• Lead the framework to continually streamline and simplify supplier review processes
• Trusted advisor within Technology audit providing guidance on complex data security matters
• Ensuring timely review of suppliers to accelerate business critical supplier onboarding