What would be a generic job description for a Security Manager Position?
The Security Manager will report to the CISO and assist in the drafting of security policies and plans, and identified objectives. The candidate will accomplish the day to day operations of the information security program resolving issues identified by technicians, administrators, analysts or staffers whom the position will supervise. The Security Manager should have experience working with the components of the security program, especially those that are defined in the SP 800-12 and the NIST 800 -14 documents, and other NIST publications. The candidate should also have knowledge of the SecSDLC model, and ISO/IEC security management models. Have full knowledge of information security policies such as the EISP, ISSP, and SSSP, and know how to develop and maintain the guidelines for effective policy. This includes policy distribution, compliance and enforcement methods and security awareness programs. The candidate must have: 1. Five years of information security work experience, with a
