Senior Manager of Information Security - Full-time / Part-time

Req ID: 99581

PURPOSE: The Senior Manager of Information Security provides leadership and guidance in support of the Information Security program.  This includes managing a team of Information Security professionals, identifying and delivering high-value information security projects, managing compliance and IT risk management functions, and advising other IT & Business leaders on critical security topics.

MAJOR RESPONSIBILITIES:

• Provides leadership and supervision to all Information Security staff
• Develops and oversees risk assessment process
• Develops information security policy
• Ensures information security goals are risk-based and aligned with business objectives
• Manages PCI compliance activities
• Develops and maintains Cyber Incident Response plans and procedures
• Supports Legal Counsel in e-discovery process
• Oversees on-going development of information security architecture and integration of all security elements
• Facilitates and promotes collaboration between teams, both internal and external
• Recommends information security solutions that meet business objectives
• Receives and responds to after hour calls, pages, and/or e-mails regarding security problems whenever necessary
• Assists in preparing, maintaining, and upholding procedures for logging, reporting, and statistically monitoring security operations
• Works with third-party support and security equipment vendors
• Conducts research on security products in support of procurement and development efforts. Evaluates and recommends products for purchase
• Produces and/or oversees the creation and upkeep of information security documentation
• Other duties assigned as needed

EDUCATION AND EXPERIENCE:

• Education:
  • HS Diploma or equivalent required
  • CISSP strongly preferred
  • Bachelor’s Degree preferred
• Experience:
  • Minimum 7 years in Information Security strongly preferred
  • Minimum 5 years managing security staff strongly preferred
  • Proven track record of managing PCI compliance
  • Proven track record of developing and conducting risk assessments

SKILLS AND PHYSICAL DEMANDS:

• Skills:

• Excellent technical knowledge of infrastructure and application development
• Good understanding of the Company’s goals and objectives
• Knowledge of applicable data privacy practices and laws
• Experience creating and maintaining budgets
• Experience researching products
• Ability to prioritize tasks in a fast-paced environment.
• Demonstrated leadership and personnel management skills

• Strong interpersonal, written and oral communication skills
• Ability to present ideas in a user-friendly language
• Highly self-motivated and directed
• Keen attention to detail
• Proven analytical and problem-solving abilities
• Strong customer service orientation; experience working in a team-oriented, collaborative environment
• Typical Physical Demands:
  • Requires prolonged sitting, some bending and stooping
  • Occasional lifting up to 25 pounds
• Manual dexterity sufficient to operate a computer keyboard and calculator
• Requires normal range of hearing and vision

Job Function(s): Information Technology
Clean Places, Friendly Faces. It's been the guiding principle at Love's for more than 50 years, and it's leading us into the future. We're passionate about serving drivers with clean, modern facilities stocked with plenty of fuel, food and supplies. Love's has two primary kinds of stores. Our 'Country Stores' are fueling stations with a convenience store attached. The larger 'Travel Stops' are located on interstate highways and offer additional amenities such as food from popular restaurant chains, trucking supplies, showers and more.