Manager, Enterprise Security

Oversee information security analysts in enterprise security strategy, security system processes, programs, communications, and activities throughout the security infrastructure and systems enterprise. Provide input to determine the appropriate levels of information risk for the enterprise and collaborate with affected business units and key stakeholders to ensure minimal exposure in accordance with applicable laws and regulations.



Key Duties and Responsibilities

• Lead, manage, and/or guide employees performing enterprise security related activities.
• Define tactical activities and processes to address issues with enterprise security. Provide long-term strategies as defined by leadership.
• Oversee configuration and engineering for new technologies within critical business functions across multiple security domains.
• Lead the integration of multiple security solutions to ensure the finished product aligns with the enterprise security initiative and compliance requirements.
• Mentor enterprise security staff during incident resolution and remediation analysis to increase efficiency and knowledge of personnel.
• Contribute to the preparation and implementation of information security policies, standards, procedures, and guidelines. Contribute to the design and operation of related monitoring and improvement activities to ensure ongoing compliance with internal security policies and applicable laws and regulations.
• Collaborate with appropriate personnel across all areas of ONE Gas to ensure appropriate risk levels are identified for information assets.
• Collaborate with leadership in the planning and budgeting of enterprise security projects.
• Regular and reliable attendance is required in performance of job.
• Employee may be required to perform additional duties as assigned.

Education Requirements

Bachelor's degree in MIS, computer science, mathematics, or related field preferred; or an equivalent combination of education and additional work experience. (Typically, one and a half to two years of relevant experience is equivalent to one year of formal education.)

Experience

• In addition to education, this role typically calls for eight to ten years of relevant experience. (Minimum of seven years' relevant experience is required). Typical experience usually includes two years in a leadership role.
• Expert level knowledge within advanced security domains and extensive knowledge of other related domains.
• Experience with current data networking, server, workstation and/or mobile technologies, and understanding and supporting the following:
  • Desktop/laptop hardware, operating system, and endpoint applications
  • Network and edge protection systems
  • Windows server and/or Unix operating systems
  • Shared storage technologies
  • Virtualization technologies
  • Mobile platforms and technologies
  • Event monitoring, logging, and alert correlation techniques
  • Cloud Services
• Previous experience relative to:
  • Operating systems software
  • Computer hardware
  • Networking
  • Communications
  • Security administration
  • Project Management
  • Application Architecture
  • System/Software Development Lifecycle
  • Cloud Computing
• Demonstrated ability to communicate complex information security concepts to stakeholders.
• Experience in investigating, assessing, identifying, researching and remediating security issues and perform risk and vulnerability assessments.
• Previous experience in researching, preparing, and composing security operations center (SOC) procedures and documentation, reports, and correspondence.
• Working knowledge of IT infrastructure environments, local, and wide-area networks and application security needs.
• Experience in interacting, advising, guiding, training, and communicating effectively.
• Experience managing, training, and/or supervising; knowledge of personnel policies and procedures.
• Demonstrated ability to read and write fluently in English.
  

Licenses and Certifications

Minimum applicable driver’s license.

Preferred Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Security Manager (CISM), Certified Information Privacy Professional (CIPP), and/or Certified Information Systems Auditor (CISA).

Additional Requirements

• Ability to use office tools and equipment required.
• Ability to communicate and/or exchange information or instructions; conduct oral presentations and/or meetings.
• Visual abilities sufficient to perform job duties.
  

This job description is meant as a guideline for employees of ONE Gas, Inc. It is not a definitive or exhaustive description and consequently may not include all tasks or functions related to the position. This document does not create, and is not part of, an employment contract. Please note the position may change to meet the changing requirements of the business. Employees may be assigned duties either, in addition to or instead of, those set out in this document and the position is subject to further changes at management’s discretion.