Manager, IT Security

The Opportunity:In the role of IT Security Manager, you will lead the security team and be responsible for architecture, design, implementation, and management of our security framework in AWS, Azure, Microsoft 365 and other SaaS platforms. This person is responsible for moving us forward into automating our security framework for ACA Group (“ACA”)’s cloud software as well as internal corporate infrastructure. Driving the team to be successful and ensuring all deliverables are met is critical to success.This person will work closely with Information Risk on the execution and enforcement of our information security programs. Additionally, this person will be the primary contact for our due diligence and audit teams, maintaining a repository of answers and evidence required to meet our obligations to clients and auditors for security certifications.Office Locations: NYC (office is near Grand Central), Pittsburgh, Chattanooga, Portland, Maine, Durham. Miami/Ft. Lauderdale/Boca (surrounding areas) and Boston are Remote Must be able to go into one of these offices 2 days/week (Hybrid)What you’ll do:Lead the development and execution of the security strategy for ACA’s technology systemsManage and mentor staff to ensure they are successful and meet required deliverablesCollaborate with Information Risk on the development and compliance of corporate security policiesCollect and organize evidence and information about our environment for use in answering client Due Diligence questions as well as other audits such as SOC and ISO 27001Define and develop security monitoring standardsDefine and implement security policies and controlsDevelop automation to detect and enforce adherence to defined policies and controlsDevelop automation to detect configurations that do not align with security best practicesDevelop security dashboards for varying audiences from engineers to managementManage the IT Security budget and balance the cost of the security tools against provided valueParticipate in the design and implementation of disaster recovery and business continuity to ensure they operate following security baselinesCraft and communicate creative and practical solutions to problemsPerform ad-hoc work/special projects as necessary to support ACA on various client and internal initiativesTo Qualify for the role, you will have:Bachelor’s Degree required – major in Cybersecurity, Information Security Management, Computer Science or Management Information Systems preferred.A minimum of seven (7) years of IT experience, with five (5) years in an information security role and at least two (2) years in a supervisory capacity.Experience performing security risk assessments and compliance audits.Required Skills And AttributesDemonstrated professional integrityDependable, flexible, and adaptable to new ACA initiatives and changing client needsAbility to work well in a fast-paced, small-team environmentSelf-starter who works to improve their own effectiveness as well as providing ad-hoc suggestionsExecutes assigned tasks on time and with high qualityWorks to first self-resolve when faced with challenges, requiring limited oversightAbility to work independently, multi-task and prioritize effectivelyAbility to establish and maintain effective working relationships with colleagues and clientsHighly motivated and goal oriented; proactive in one’s own education and career progression; volunteers for and shows initiative on both internal and external projects and tasksDedicated to upholding ACA’s high-quality standards and customer service focusStrong organizational and problem-solving skills with attention to detailStrong oral and written communication skillsPreferred Education And Experience3+ years’ experience in AWS or Azure Cloud Security & Security AutomationFamiliar with GDPR, SOC, NIST, and ISO 27001 standards and associated audit processesSecurity Certifications such as AWS Security, SSCP, CISSP, or CISMWhat working at ACA offers:We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. Our Total Rewards package includes medical and dental coverage and 401(k) plans, and a wide range of paid time off options as well as a flexible work environment. You’ll also be granted time off for designated ACA Paid Holidays, Summer Fridays, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being. We also offer unique benefits such as Student Debt Forgiveness and Pet Insurance.About ACA:ACA Group is the leading governance, risk, and compliance (GRC) advisor in financial services. We empower our clients to reimagine GRC and protect and grow their business. Our innovative approach integrates consulting, managed services, and our ComplianceAlpha® technology platform with the specialized expertise of former regulators and practitioners and our deep understanding of the global regulatory landscape.What we commit to:ACA is firmly committed to a policy of nondiscrimination, which applies to recruiting, hiring, placement, promotions, training, discipline, terminations, layoffs, transfers, leaves of absence, compensation and all other terms and conditions of employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.