Information Security Manager-Threat & Vulnerability (Project Management)

Ascend Learning is a national leader in data driven, online educational solutions for learners, educators and employers in high-growth, licensure-driven professions spanning healthcare, fitness and wellness, skilled trades, insurance, and financial services. We are passionate about accelerating learning while impacting job readiness, employment success and employee retention with the belief that our work changes lives.

Our culture is intentionally results-driven and selfless with a relentless focus on our customers. We believe in trust, transparency, freedom, and responsibility with a commitment to meritocracy, inclusion, and diversity of thought. Continual investment in our over 1500 employees is also a core principle realized through ongoing professional development and providing opportunities to grow, develop and lead. Ascend Learning is headquartered in Burlington, MA with additional office locations and remote workers in cities across the U.S.

Ascend Learning is hiring an Information Security Manager. As an Information Security Manager, you will lead a team responsible for protecting Ascend Learning from threats and vulnerabilities through identification, validation, remediation tracking, and communication processes. In this critical role, you will provide technical security leadership in vulnerability management, threat management and other security domains. The ideal candidate will possess a thorough understanding of current threats, attack techniques, emerging technologies, and security best practices and is able to offer and develop solutions. The Information Security Manager will manage full-time and contract resources and will report to the Senior Director of Information Security. This position can be remote or work hybrid from one of our Ascend Learning office locations.

Responsibilities

• Leads, mentors, and manages full time and contract security engineers to ensure all owned programs and functions are effective in identifying threats and vulnerabilities that could impact Ascend Learning operations, data, and systems.
• Is accountable for the daily review of threat intelligence feeds and communications within defined SLAs, threat tracking and escalations, and vulnerability scanning platforms and reports.
• Collaborates across Information Security organization, other Ascend technology teams, and third-party vendors to ensure threat intelligence is being shared and processes, and defenses are updated accordingly.
• Provides technology security expertise and recommendations on strategies and tools for key programs and issues.
• Ability to conduct deep-level analysis of malware, including how it is developed, functions, and is employed.
• Ability to research and analyze known hacker methodologies, system exploits, and vulnerabilities to support methodology development and execution.
• Provides project management to internal team security initiatives such as automation projects or red team exercises.

Education and Experience

• Bachelor's Degree in Cybersecurity, Information Systems, Computer Science, or related field is preferred.
• Applicants should possess 12+ years of demonstrated experience in cybersecurity, network and/or infrastructure engineering. 7 of the years must include hands on experience in one or many of the following areas - threat intelligence, vulnerability management, pen testing, and/or ethical hacking.
• 5+ years leading security operations and programs is required.
• 5+ years resource management including coaching, performance evaluations, and professional development.  
• Experience leading security initiatives using technical and non-technical solutions to solve complex problems.
• Experience with MITRE ATT&CK and OWASP frameworks is required.
• Certifications: CEH or related training is preferred.

Skills and Abilities

• Proven leader and manager with the ability to lead diverse and geographically dispersed teams.
• Demonstrated success in developing, operating, leading, and implementing security solutions and functions.
• Understanding of malware and common attack types is highly desired.
• Ability to work under pressure and apply critical thinking skills to meet project deadlines or operational SLAs.
• Proactive attitude towards anticipating problems, implementing solutions, and accomplishing goals.
• Willingness to perform various roles when required in order to achieve results.
• Excellent interpersonal skills as well as strong verbal and written communication skills.
• Proven ability to communicate risks, solutions, and recommendations to complex problems to different audiences.

Ascend Learning, LLC is proud to be an equal opportunity employer (M/F/Vets/Disabled). No agency or search firm submissions will be accepted. Applications for U.S. based positions with Ascend Learning, LLC must be legally authorized to work in the United States and verification of employment eligibility will be required at the time of hire.

#LI-NK1

Technology