*Salary Grade is the range one can make during their time in this role. Not the guaranteed starting range.
Department/Location:
780 - Information Technology/ National Headquarters
Job Title:
Information Security Manager
Report to:
IT Security & Operations Associate Director
Salary Grade:
ý – Grade 16
($74,360.00 - $115,627.20/year)
Type of position:
ý Full-time o Part-time
Minimum Hours: 40 /Hours Week
ý Exempt o Nonexempt
Job Summary: The following statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.
Responsible for organizing DAV information security activities, risk assessments and to manage internal efforts to ensure compliance with laws, regulations, internal policies and standards.
Essential Functions:
- Develop and recommend security policies, standards, procedures and controls for maintaining data security
- Conduct reviews to measure compliance with NIST, PCI, and ISO standards, regulations and frameworks
- Monitor compliance with state, federal and international laws regarding data privacy and security breaches
- Develop a security strategy, security awareness program, security architecture, and security incident response
- Develop and maintain up-to-date security policies, standards and guidelines
- Oversees training and dissemination of security policies and practices
- Coordinate information security efforts of all internal IT groups, to ensure that organization-wide information security efforts are consistent across DAV, and that duplication of effort is minimized
- Manage audit gaps, identifies those within IT, and responsible for remediating or closing audit findings, negotiate dates for closure, and track/report progress
- Assist management in conceptualizing all compliance related risks that DAV faces, and how best to deal with these risks using an integrated risk management approach
- Provides strategic risk guidance for IT projects, including evaluation and recommendation of technical controls
- Perform other duties as assigned
- Up to 10% travel required
Essential Skills and Experience:
- Broad knowledge of information technology governance practices including risk, audit, policy and standards development, metrics development, and education and training
- Strong knowledge of, and experience working in, industry-wide information security frameworks, including ISO 27001 and NIST
- Strong organizational skills
- Strong project management skills
- Self-Starter requiring minimal supervision or direction
- Ability to motivate and lead technical teams
- Excellent written and verbal communication skills
- Exposure to MS Word, MS Project, SharePoint and associated processes and tools
- Required: Bachelor's Degree or 5+ years of experience in the field or in a related area
- A valid motor vehicle driver’s license (other than motorcycle) is preferred
Degree of Supervision:
- No Supervisory Responsibilities
Physical Demands and Work Environment: The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- Physical Demands: Job requires sitting up to eight hours a day and standing two to four hours a day. Body movement primarily in hand and arm functions associated with normal office activities. Hand and eye coordination, and hand dexterity is required for handwriting and keyboarding over prolonged periods of time. Specific vision abilities required by the job include close vision, distance vision, peripheral vision, depth perception, and the ability to adjust focus. This position requires occasional lifting and/or carrying of no more than 25 pounds, and bending, squatting, pushing, and pulling.
- Work Environment: The noise level in the work environment is usually minimal.
Skills Required
- Bachelor's degree or 5+ years of experience in information security or a related field
- Knowledge and experience with information security frameworks, including ISO 27001 and NIST
- Broad knowledge of IT governance, risk, audit, policy and standards development, metrics, education, and training
- Strong organizational skills
- Strong project management skills
- Ability to motivate and lead technical teams
- Excellent written and verbal communication skills
- Experience with Microsoft Word, Microsoft Project, SharePoint, and associated processes and tools
- Valid motor vehicle driver's license other than motorcycle
What We Do
DAV (Disabled American Veterans) is a leading nonprofit that provides a lifetime of support for veterans of all generations and their families. Every year, we help more than 1 million veterans in positive, life-changing ways by helping them access benefits they earned, like healthcare, education and disability, and connecting them to meaningful employment opportunities. We are committed to ensuring that the men and women who stood up for America have the tools, resources and opportunities they need to competitively enter the job market and secure meaningful employment. DAV recognizes the value, talent, education and work ethics that veterans add to the workforce. Through our partnership with RecruitMilitary, DAV sponsors career fairs, including virtual events, to connect veterans with employers nationwide who are committed to hiring them. DAV is the nation’s most resourceful veterans service organization, keeping the promise to support America’s veterans. Learn more at www.DAV.org.
