Job Title: Information Security Manager Department: Information Technology Team Leader: Director of Information Technology Status: Exempt Mission Contribution: Safeguard the information systems and data of Memphis Goodwill (MGI) and Memphis Goodwill Industries, Inc. (MGII) by ensuring robust security, efficient database management, and a stable Linux platform for critical applications. Function: Under the guidance of the Director of IT, the Information Systems Manager oversees the design, implementation, maintenance, and security of the organization's IT infrastructure. The manager is responsible for ensuring optimal performance, reliability, and scalability of the network, hardware, software, and cloud services. They will also collaborate with the Information Security Manager to maintain a secure IT environment and ensure compliance with industry standards and best practices. Essential Responsibilities:
Develop, implement, and enforce comprehensive cybersecurity strategies and policies across both MGI and MGII, with a focus on Linux-based systems and databases.
Regularly assess and mitigate security risks related to PCI compliance and other relevant standards.
Oversee the management and optimization of database systems for performance, security, and scalability.
Guide the development and maintenance of Linux-based applications and infrastructure.
Collaborate with the Information Systems Manager to:
o Develop and implement disaster recovery and business continuity strategies. o Integrate security measures with overall IT infrastructure plans and initiatives.
Provide guidance and oversight to IT staff on cybersecurity and Linux system administration responsibilities.
Maintain constructive relationships with technology vendors related to cybersecurity and Linux systems.
Maintain a high level of confidentiality regarding organizational and sensitive personal data.
Key Performance Indicators (KPIs):
Security Incident Response Time
Compliance Rate (PCI and other relevant standards)
System Uptime (Linux-based systems)
Qualifications:
Strong leadership and team management skills.
In-depth knowledge of cybersecurity principles and practices, with a focus on Linux and database systems.
Experience with database management systems (e.g., My SQL, Postgre SQL).
Expertise in Linux system administration and development.
Security certifications (e.g., SSCP, CISSP) are a plus.
Training & Experience:
Bachelor's degree in computer science or a related field preferred.
Minimum of 3 years of experience in cybersecurity, systems engineering, or system administration, with a focus on Linux and database systems. At least 2 years in a management or team lead role.