Security Operations Manager

Raymour & Flanigan; Liverpool; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading furniture retailer based in Liverpool is looking for a Security Operations Manager. The successful candidate will manage the Security Operations Team, develop security policies, and conduct audits. Candidates should have a Bachelor's degree in Information Security or a related field, a minimum of 10 years in IT, and 5 years in IT Security. Familiarity with NIST and CIS frameworks is highly desirable. This is a mid-senior level role emphasizing security management in a retail environment.

Qualifications

• Minimum 10 years of experience in Information Technology.
• Minimum 5 years experience in IT Security.
• Certifications like CISSP, CEH or GPEN highly desirable.

Responsibilities

• Lead the Security Operations Team.
• Develop information security policies and procedures.
• Conduct audits and risk analysis.

Skills

Security Incident Management

Vulnerability Management

Threat Intelligence

Log Management

Network Monitoring

Education

Bachelor's degree in Information Security or equivalent

Tools

NIST

CIS

ITIL

Security Information and Event Management (SIEM)

Vulnerability Management tools

Job description

Overview

Join to apply for the Security Operations Manager role at Raymour & Flanigan Furniture and Mattresses

Raymour & Flanigan is the largest furniture and mattress retailer in the northeastern United States and seventh largest nationwide. Family-owned and led for more than seven decades, we help people come home to comfort with more than 5,000 dedicated employees working in our full-line showrooms, outlet stores, clearance centers and distribution warehouses across 7 states.

Responsibilities

• Develop, lead, and manage the Security Operations Team.
• Develop and maintain information security policies, procedures, standards, and guidelines based on best practices (NIST/CIS), regulatory (PCI/DFS), and legal compliance.
• Performs quantitative risk analysis and threat modeling to conduct quantitative cyber risk analysis.
• Conducts Information Security audit activities.
• Remain up to date on trends and issues in the security industry, including current and emerging technologies.
• Assist in enhancing the IT Security Program by managing the day-to-day monitoring and alerting of Security Information and Event Management (SIEM) technology.
• Provide guidance and security policy interpretation to managing risk on Windows/Linux servers and desktops, Active Directory (Group Policy), network communications, company data stores, perimeter networks, virtual private networks, and e-mail communications.
• High level of expertise in Windows/Linux Servers/Services.
• Network monitoring, log management, and log analysis from a variety of network sensors to investigate suspect network activity.
• Work with the Infrastructure team and third-party solutions to interpret activity from system logs and network traffic to recognize and react to anomalies that may indicate vulnerabilities or unauthorized exploitation of resources.
• Interpreting network traffic and determining whether activity is legitimate.
• Utilize technical security systems including host and client-based firewalls, intrusion detection/prevention systems, cryptographic systems, endpoint security systems, threat intelligence, and zero-day and anti-virus software to monitor system activity.
• Conduct investigations in response to policy violations and security incidents.
• Develop and manage information security reporting, metrics, and dashboards.
• Participate in rotating "on-call" schedule with other members within the Information Security department.
• Performs other duties as assigned or necessitated by business, regulatory, or emergencies.
• Manage Projects/Deployments for Security Initiatives and business requirements.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or Engineering or equivalent experience preferred
• Experience with NIST, CIS, and ITIL Highly desirable
• Minimum 10 years experience in Information Technology
• Minimum 5 years experience in IT Security Experience with Security Incident Management, GRC, IAM, Threat Intel, SOC, Vulnerability/Penetration testing, Data Security, SDLC, Cloud Security
• Experience performing security investigations
• Experience with Vulnerability Management tools
• Experience with 3rd party penetration testing activities is highly preferred.
• Certifications: CISSP, GCFA, GCFE, CEH or GPEN is highly desirable. GSEC, SSCP, ECSA or CISM is desirable. MCSE, MCSA, CCNA, or CCNP is a plus.

Raymour & Flanigan proudly supports a drug and smoke-free work environment.

Please note that we are currently unable to offer visa sponsorship for this position. Candidates must have authorization to work in the U.S. without the need for sponsorship now or in the future.

Raymour & Flanigan is an Equal Employment Opportunity employer that does not discriminate against any associate or applicant on the basis of race, creed, color, religion, sex (including pregnancy), age, national origin, physical or mental disability, status as a victim of domestic violence, sexual orientation, sexual and other reproductive health decisions, marital or familial status, genetic information or other basis protected by law.

Seniority level

• Mid-Senior level

Employment type

• Other

Job function

• Other, Information Technology, and Management

Industries

• Retail