Spaulding Ridge is an advisory and IT implementation firm. We help global organizations get financial clarity into the complex, daily sales, and operational decisions that impact profitable revenue generations, efficient operational performance, and reliable financial management.
At Spaulding Ridge, we believe all business is personal. Core to our values is our relationships with our clients, our business partners, our team, and the global community. Our employees dedicate their time to helping our clients transform their business, from strategy through implementation and business transformation.
What You Will Do and Learn
As a Senior Manager on the Technology and Security team, you will be responsible for ensuring Spaulding Ridge’s security stance. This position is not traditional management and will require front line leadership and collaboration across multiple teams and some hands-on project work.
Ideal candidates will be able to:
- Security Strategy: Developing and implementing a comprehensive security strategy for the organization, including identifying potential threats and vulnerabilities, and establishing appropriate security controls and measures including secure code standards and framework.
- Project Management: Oversee related projects and initiatives. This includes resource management, budgets, and delivery
- Incident Response: Leading the incident response team in detecting, analyzing, and responding to security incidents. This involves coordinating with other teams, such as the red team (penetration testers) and the SOC (Security Operations Center), to ensure a timely and effective response.
- Security Automation: Assist in automation efforts to leverage security and endpoint management tools to support reporting controls dashboard using Python and/or SQL.
- Security Operations: Overseeing the day-to-day security operations, including monitoring and analyzing security logs, managing security incidents, and ensuring compliance with security policies and procedures.
- Risk Management: Assessing and managing security risks by conducting risk assessments, identifying potential vulnerabilities, and implementing risk mitigation strategies.
- Security Architecture: Collaborating with the IT architecture team to design and implement secure IT infrastructure, systems, and applications. This includes evaluating and selecting security technologies, conducting security reviews, and ensuring the integration of security controls into the overall architecture.
- Compliance and Audit: Ensuring compliance with relevant security standards, regulations, and industry best practices. This involves conducting regular security audits, coordinating with internal and external auditors, and addressing any identified security gaps or non-compliance issues.
- Vendor Management: Evaluating and managing relationships with third-party vendors and service providers to ensure their security practices align with the organization's requirements and standards.
- Incident Reporting and Communication: Preparing and presenting reports on security incidents, trends, and metrics to senior management and other stakeholders. This includes providing recommendations for improving security posture and addressing any identified weaknesses.
- Continuous Improvement: Staying updated with the latest security threats, technologies, and industry trends to continuously improve the organization's security posture. This may involve participating in industry forums, attending conferences, and pursuing relevant certifications.
Qualifications:
- 8+ years in direct technology roles
- 5+ years of experience in Cyber security roles
- 4+ years of team management experience including growing new technology teams
- Demonstrates a high level of attention to detail
- Exhibits persistent problem-solving skills, actively seeking solutions and overcoming challenges.
- Displays a proactive attitude towards learning new technologies, embracing opportunities to expand knowledge and skills.
- Recognizes the importance of documentation and adheres to established procedures, ensuring efficient and organized work processes.
- Solid knowledge of cybersecurity trends, technologies, and risk management principles
- Exceptional communication skills to foster collaboration and alignment among diverse teams
- BS or Master’s Degree in Computer Science, Cybersecurity, Information Technology or a related field desired
- Working knowledge of Python and SQL including usage of REST API
- Familiarity with various security frameworks and standards such as NIST and ISO 2700.
- Strong understanding of network security, encryption, firewalls, intrusion detection systems, and vulnerability assessment tools.
- Experience with leading security tools such as Carbon Black, CrowdStrike, Netskope, SentinelOne, Zscaler
- Industry leading security certifications (or willingness to achieve certification)
- Azure and AWS certifications (or willingness to achieve certification)
- Knowledge of cloud security best practices, data privacy regulations, and compliance standards (such as GDPR or HIPAA) is important to ensure the security and integrity of cloud operations.
Spaulding Ridge’s Diversity, Equity & Inclusion (DEI) Commitment
When we engage the expertise, insights, and creativity of people from all walks of life, we become a better organization, we deliver superior services to clients, and we transform our communities and world for the better.
At Spaulding Ridge, we believe our team should reflect the rich diversity of society and we take seriously the responsibility to cultivate a workplace where every bandmate feels accepted, respected, and valued for who they are. We do this by creating a culture of trust and belonging, through practices and policies that support DEI, and through our employee led Employee Resource Groups (ERGs): CRE (Cultural Race and Ethnicity), Women Elevate, PROUD and Mental Wellness Alliance.
The company is committed to offering Equal Employment Opportunity and to providing reasonable accommodation to applicants with physical and/or mental disabilities. If you are interested in applying for employment with Spaulding Ridge and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to our VP of Human Resources, Cara Halladay (challaday@spauldingridge.com). Requests for reasonable accommodation will be considered on a case-by-case basis.
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, gender, sexual orientation, gender identity, protected veteran status or disability.
