Job Description

<div>
 At NorthStar Memorial Group, we choose collaboration over bureaucracy. Here, everyone has a chance to lead. We encourage &amp; empower our people at every level to speak up, be heard, and watch their ideas become realities. Degreed &amp; non-degreed professionals, labor workers, industry experts &ndash; people from all career and experiential backgrounds have the opportunity to find a home here.
 <br/>
 <br/>
 NorthStar Memorial Group is seeking an
 <strong>
  IT Security and Compliance Manager
 </strong>
 to achieve our company&rsquo;s data security and compliance objectives. This unique opportunity is perfect for individuals that want to build on their cyber security experience, are passionate about compliance, and want to make an impact.
 <br/>
 <br/>
 The IT Security and Compliance Manager is a hands-on role, responsible for designing, administering, and providing leadership for the organization&rsquo;s information security and compliance program. This includes developing, implementing, and maintaining an information security program that meets or exceeds the requirements of industry regulations, standards, policies, and legal requirements. You can expect your time to be shared between the following focus areas: Information Security 60%, Compliance 20%, Risk Management 20%. This position will be hybrid remote and based out of our Home Office, located in the Houston Galleria area.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Serve as Subject Matter Expert on cybersecurity and compliance
  </li>
  <li>
   Advise the VP of IT, CIO, and other executives on the best strategies for optimizing the security of data systems, information assets, and general business processes
  </li>
  <li>
   Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks
  </li>
  <li>
   Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement
  </li>
  <li>
   Collaborate with cross-functional teams to ensure that security requirements are incorporated into system and network design, development, and implementation processes.
  </li>
  <li>
   Perform vulnerability assessments, penetration testing, and risk assessments to identify and prioritize potential security risks and vulnerabilities.
  </li>
  <li>
   Conduct regular training sessions and workshops to educate employees about the latest information security and compliance policy updates
  </li>
  <li>
   Manage NorthStar&rsquo;s third-party risk management program.
  </li>
  <li>
   Advise department heads on data privacy best practices.
  </li>
  <li>
   Stay up to date on the latest security threats, technologies, and industry trends, and provide recommendations for improving security posture.
  </li>
  <li>
   Ability to manage and provide hands-on leadership for the department&rsquo;s incident response activities, including testing, investigation, containment, and recovery efforts, as needed.
  </li>
  <li>
   Conduct assessments and audits to measure and evaluate and document disaster recovery programs
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements And Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Proven work experience as a System Security Engineer or Information Security Engineer
  </li>
  <li>
   Minimum of 3-5 years of management experience in cyber-security.
  </li>
  <li>
   Bachelor's degree in Computer Science, Information Technology, or equivalent experience.
  </li>
  <li>
   CISSP, CISM, CEH, or other security certifications.
  </li>
  <li>
   Strong knowledge of security principles and best practices, such as NIST, ISO 27001, and CIS security controls.
  </li>
  <li>
   Hands-on experience with security technologies such as firewalls, IDS/IPS, log and event management, content filtering, endpoint detection and response, and vulnerability scanning tools.
  </li>
  <li>
   Detailed technical knowledge of database and operating system security
  </li>
  <li>
   Knowledge of core Information Security concepts related to Governance, Risk &amp; compliance
  </li>
  <li>
   Familiarity with security-related regulations, such as CCPA, SEC Cyber 7, and PCI-DSS.
  </li>
  <li>
   Excellent analytical, problem-solving, and troubleshooting skills.
  </li>
  <li>
   Ability to travel approximately 5%
   <br/>
   <br/>
  </li>
 </ul>
 We are an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender, gender identity, national origin, disability, or veteran status.
</div>