Senior Manager, Information Security

About Us:

Headquartered in Jersey City, NJ, Neptune Retail Solutions is the nation’s premier retail marketing services company. We are experts at influencing buying behaviors through disruptive, innovative, and results-oriented solutions, including in-store, home-delivered, and digital media tactics. Our powerful advertising and promotional programs are supported through rich data and insights. The country’s largest consumer packaged goods manufacturers rely on NRS for unparalleled consumer reach and engagement.

NRS’s digital portfolio is making its mark on the industry. NRS digital products include Checkout 51, Freedom Platform, digital media tools/services (digital display, premium mobile, social, email, DOOH, and digital in-store). We continue to strengthen these existing tactics while expanding our product offerings, partnerships, and capabilities. We offer unique and data-led strategies for our clients to reach their most valuable shoppers. Our products continue to evolve to include best-in-class methods to deliver engaging content at the most impactful time in the most relevant geographies.

PURPOSE
The Senior Manager, Information Security is a hands-on role responsible for overseeing and implementing the organization's information security strategy, ensuring the protection of IT systems, data, and networks from cyber threats. This role involves understanding as-is processes, identifying gaps, gathering requirements, re-engineering processes, and working with IT colleagues to create measurable metrics. Reporting to and working closely with the CIO to recommend, gain approval, implement security initiatives, ensure daily operations and ensure compliance with relevant regulations and standards.

RESPONSIBILITIES:

• Creating and implementing comprehensive cybersecurity strategies, risk management programs, and security frameworks to protect the organization's information assets.


• Oversee cybersecurity analyst(s), including vendor management and managed service engagements to ensure effective security operations.


• Ensure that the organization complies with relevant security standards, regulations, and legal requirements related to data privacy and security.


• Lead incident response efforts, investigating security breaches, and implementing corrective actions to mitigate risks and prevent future incidents.


• Responsible for managing the cybersecurity vendor contracts.


• Ensure team focus of initiatives, daily operations and prioritization is aligned with company priorities.


• Daily operations include but not limited to the monitoring all in-place controls, i.e., security incidents, vulnerability management.


• Identify and assess potential security risks, develop mitigation strategies, and monitor the effectiveness of security controls.


• Collaborate with various stakeholders, including senior management, IT teams, and business units, to promote a culture of security awareness and ensure alignment with business objectives.


• Provide monthly KPI report outs to the IT Leadership team and others, as appropriate.


• Ensure security awareness training is effectively conducted across the organization.


• Keep abreast of the latest security threats, vulnerabilities, and technologies to ensure the organization's security posture remains effective.

POSITION REQUIREMENTS:

• Ability to balance technical excellence with pragmatic solutions that address business needs.


• Strong track record and positive reputation to influence others and move toward a common vision or goal, within and/or beyond their business area.


• Effective problem solving, consulting and interpersonal skills, with a strong ability to build and maintain relationships with all levels within the organization, excellent active listening skills.


• Critical thinking, problem solving and analytical skills; ability to analyze security incidents, identify vulnerabilities, and develop effective solutions is vital.


• Must be a team player and able to work with and through others.


• Knowledge of GDPR and CCPA regulations.

TECHNICAL REQUIREMENTS:

• Must have extensive knowledge and hands-on administrative experience with end-point detection and response (EDR), identity and access controls (IAM), security logging (SIEM) and vulnerability management. Specific tools desired: Crowdstrike, ProofPoint and Tenable.


• Ability to review, monitor, evaluate and partner with IT Infrastructure and DevOps colleagues to configure infrastructure accordingly. Specific tools desired: Meraki wireless access, Cisco routers/switches/VPNs, Palo Alto firewalls, Active Directory, Microsoft 365, AWS and GCP.


• Proven knowledge of the NIST cybersecurity framework.

Neptune Retail Solutions is an Equal Opportunity Employer