Coverys

Manager, Information Security

Boston

Work authorization required$160k-$188kDetected 36 days ago

AWSAzureCybersecuritySOC OperationsIncident ResponseComplianceAuditingFirewallHIPAACommunicationInternal AuditCISSP

About the role

The role will be instrumental in assisting the organization's plans to further mature its security practice through alignment to NIST CSF 2.0.
Reporting - Ensure we collate and regularly report on security governance metrics to leadership. - Accountable for key metrics that we will be establishing and maintaining for security operations progress.
Carry out supervisory responsibilities in accordance with the organization's policies and applicable laws.

Support evolving business needs, as applicable.
Ability to communicate effectively and influence stakeholders to implement Information Security recommendations.
Oversee the benchmarking of our security delivery against NIST CSF 2.0 and then develop a plan to increase our maturity from both a policy and practice perspective.
Manage partners, stakeholders, vendors and third-party service or solutions providers of relevant IT Security services.

Bachelor's degree in Computer Science, Information Systems, or STEM subject from an accredited college/university, required.
5-8 years operational experience in information security within a regulated environment, required.
2-3 years experience in a supervisory role, required.
Experience in managing information security audits, required.
E.g. Azure, AWS, required.
Qualified candidates must be eligible to work in the US without sponsorship or restriction.
Regularly review and hone the toolsets required to monitor for, protect from, and respond to cyber incidents.
Ensure that we maintain and monitor a suite of staff training in relation to security awareness skills and required behaviors.
5-8 years operational experience in information security within a regulated environment, required. 2-3 years experience in a supervisory role, required.
Experience with information security within an environment that has regulatory requirements e.g. HIPAA, required.

Professional certification in information security, such as CISA, CRISC, CISSP or CISM, highly preferred.
Knowledge and experience of Firewalls, Identity Management, Managing Security in M365 and Azure, highly preferred required.
Knowledge and experience of MS Purview, highly preferred.

Qualified candidates must be eligible to work in the US without sponsorship or restriction.

This listing is sourced directly from Coverys's careers page and normalized into a canonical job model.