Senior Manager, Information Security

About Us:

Headquartered in Jersey City, NJ, Neptune Retail Solutions is the nation’s premier retail marketing services company. We are experts at influencing buying behaviors through disruptive, innovative, and resultsoriented solutions, including instore, homedelivered, and digital media tactics. Our powerful advertising and promotional programs are supported through rich data and insights. The country’s largest consumer packaged goods manufacturers rely on NRS for unparalleled consumer reach and engagement.

NRS’s digital portfolio is making its mark on the industry. NRS digital products include Checkout 51, Freedom Platform, digital media toolsservices (digital display, premium mobile, social, email, DOOH, and digital instore). We continue to strengthen these existing tactics while expanding our product offerings, partnerships, and capabilities. We offer unique and dataled strategies for our clients to reach their most valuable shoppers. Our products continue to evolve to include bestinclass methods to deliver engaging content at the most impactful time in the most relevant geographies.

PURPOSE
The Senior Manager, Information Security is a handson role responsible for overseeing and implementing the organizations information security strategy, ensuring the protection of IT systems, data, and networks from cyber threats. This role involves understanding asis processes, identifying gaps, gathering requirements, reengineering processes, and working with IT colleagues to create measurable metrics. Reporting to and working closely with the CIO to recommend, gain approval, implement security initiatives, ensure daily operations and ensure compliance with relevant regulations and standards.

RESPONSIBILITIES:

• Creating and implementing comprehensive cybersecurity strategies, risk management programs, and security frameworks to protect the organizations information assets.
• Oversee cybersecurity analyst(s), including vendor management and managed service engagements to ensure effective security operations.
• Ensure that the organization complies with relevant security standards, regulations, and legal requirements related to data privacy and security.
• Lead incident response efforts, investigating security breaches, and implementing corrective actions to mitigate risks and prevent future incidents.
• Responsible for managing the cybersecurity vendor contracts.
• Ensure team focus of initiatives, daily operations and prioritization is aligned with company priorities.
• Daily operations include but not limited to the monitoring all inplace controls, i.e., security incidents, vulnerability management.
• Identify and assess potential security risks, develop mitigation strategies, and monitor the effectiveness of security controls.
• Collaborate with various stakeholders, including senior management, IT teams, and business units, to promote a culture of security awareness and ensure alignment with business objectives.
• Provide monthly KPI report outs to the IT Leadership team and others, as appropriate.
• Ensure security awareness training is effectively conducted across the organization.
• Keep abreast of the latest security threats, vulnerabilities, and technologies to ensure the organizations security posture remains effective.

• 
  

  POSITION REQUIREMENTS:

  • Ability to balance technical excellence with pragmatic solutions that address business needs.
  • Strong track record and positive reputation to influence others and move toward a common vision or goal, within andor beyond their business area.
  • Effective problem solving, consulting and interpersonal skills, with a strong ability to build and maintain relationships with all levels within the organization, excellent active listening skills.
  • Critical thinking, problem solving and analytical skills; ability to analyze security incidents, identify vulnerabilities, and develop effective solutions is vital.
  • Must be a team player and able to work with and through others.
  • Knowledge of GDPR and CCPA regulations.

  • 
    

    TECHNICAL REQUIREMENTS:

    • Must have extensive knowledge and handson administrative experience with endpoint detection and response (EDR), identity and access controls (IAM), security logging (SIEM) and vulnerability management. Specific tools desired: Crowdstrike, ProofPoint and Tenable.
    • Ability to review, monitor, evaluate and partner with IT Infrastructure and DevOps colleagues to configure infrastructure accordingly. Specific tools desired: Meraki wireless access, Cisco routersswitchesVPNs, Palo Alto firewalls, Active Directory, Microsoft 365, AWS and GCP.
    • Proven knowledge of the NIST cybersecurity framework.

    • 
      

      Applicant Privacy Notice

      Neptune Retail Solutions is an Equal Opportunity Employer