Full job description The Role: As the Information Security Manager you will oversee the development and implementation of Information Security, IT governance, and risk management strategies, policies, and procedures. You will be responsible for ensuring the confidentiality, integrity, and availability of the organization's information assets, and safeguarding against cyber threats and attacks. This role is instrumental in ensuring that the organization's overall strategy and objectives are met while IT risks and information security are effectively managed.
Job Duties: Develop and implement information security frameworks, conducting regular security assessments and audits and implementing security controls and measures.
Work with the Organizational Development team on end-user security training and awareness programs to educate employees while maintaining company productivity.
Develop and implement IT governance and risk management strategies, policies, and procedures, including developing IT governance frameworks, risk management methodologies, and compliance programs.
Directly supervise IT Security Team. Manage workload and personnel needs including hiring, training, performance management, and disciplinary actions. Serve as technical backup as needed.
Work with the CIO and other IT Management to manage relationships and services with vendors, partners, and Managed Services Providers to improve and ensure security and service level performance.
Owns the oversight of the Managed Security Provider ensuring processes and playbooks are maintained, followed, and updated as needed.
Respond to all security alerts as raised by the Managed Security Provider and take further action if necessary.
Develop a vulnerability management framework for IT, ensuring regular scans are run on all workstations, servers, and cloud products. Prioritizes results and makes recommendations to the IT Operations team to implement and prioritize.
Gather the data, history, and information necessary to assist in developing the IT budget regarding Information Security tools and contracts.
Ensure that IT security initiatives align with the organization's strategy and objectives by working closely with senior management and stakeholders to understand its goals and priorities.
Identify, assess, and manage IT risks by conducting regular risk assessments, developing risk mitigation plans, and implementing risk management controls. Oversees the management of the IT Risk Register.
Collaborate with other departments to ensure secure practices and information security frameworks are integrated into the organization's overall governance and risk management framework by participating in cross-functional governance and risk management committees and working groups.
Stay updated with industry developments and best practices by attending conferences and training sessions, reading industry publications, and participating in professional associations. Travel is required for training and/or to assist at other locations. Our Ideal Candidate: Bachelor's degree in cyber security, computer science, Information Systems, or related field 5+ years of cybersecurity, IT governance frameworks, risk management methodologies, and compliance programs. 1+ Certifications in Cyber Security, IT governance, and risk management
What Will Put You Ahead: Certifications in Information Systems Security (CISSP), Information Security Manager (CISM), Governance of Enterprise IT (CGEIT), Information Systems Auditor (CISA), Risk and Information Systems Control (CRISC) Excellent communication, collaboration, and leadership skills Ability to communicate complex technical information to non-technical stakeholders, build strong relationships at all levels of the organization, and lead cross-functional teams Working knowledge of IT operations and best practices including cloud computing and ITIL
What We Can Offer You: Competitive pay to recognize your valuable contribution 401(k) with matching Full insurance benefits starting day one of employment for full-time employees Holiday, PTO, and Parental Leave, promoting work-life balance and personal growth
About Foley Equipment:
Foley Industries – Foley Equipment, Foley Power Solutions, Foley Rental, and SITECH Central – proudly stands at the forefront of progress, serving customers in Kansas and Western Missouri for over nine decades. With a dedicated team of over 1,000 employees, we are committed to delivering exceptional service, top-quality parts and rentals, and unparalleled sales support across a comprehensive range of Caterpillar and allied construction equipment, power generation solutions, and cutting-edge SITECH construction technology. As we continue to empower our customers' success, we invite you to explore the endless opportunities that await you at Foley. To learn more about our company and join our team of industry leaders, please visit
Foley Industries, Inc. is an Equal Opportunity Employer (Race/Gender/Veteran/Disabled/Sexual Orientation/Gender Identity). To request a reasonable accommodation or assistance in completing the application, call or email .
At this time, Foley does not participate in any Visa sponsorship programs.
