IT Security Manager

The selected candidate will lead our organization's cybersecurity strategy and operations, overseeing the protection of company systems and data, ensuring compliance with regulatory requirements, and continuously improving our security posture. Our best team members pay intense attention to detail in all aspects of their work, have great initiative, are opinionated about the best ways of doing things, and align quickly to decisions.

Amida Technology Solutions is a DC-based technology company focused on data interoperability, integrity, governance, and security. We create solutions that collect, reconcile, transform, and standardize data for business intelligence, advanced analytics, decision support, and user transactions. We specialize in taking data from inception to impact.Our team is composed of creative, forward-looking thinkers who are passionate about using cutting-edge technology to improve lives and generate a positive impact on our country. We offer an entrepreneurial, high-growth environment that values fresh ideas, candid conversations, and authentic teamwork.Amida Technology Solutions is seeking an IT Security Manager. The selected candidate will lead our organization's cybersecurity strategy and operations, overseeing the protection of company systems and data, ensuring compliance with regulatory requirements, and continuously improving our security posture. This role will report to the CFO. The ideal candidate will be motivated by the opportunity to support public agencies, nonprofit organizations, and private companies in transforming their data into actionable insights. The candidate must be able to work 3 days per week in our offices in DC or Richmond, VA.What you will do:Oversee and enhance Amida's IT and physical office cybersecurity and hygiene practices, ensuring the protection and efficiency of cloud environments and user systems across three global office locations Manage security protocols and maintain optimal performance for operations across multiple continentsLead the development and implementation of enterprise-wide IT security policies, procedures, and standards across Google Workspace, AWS, Azure, and government AWS and AzureManage and mentor IT professionals Maintain a physical security program aligned with Amida's regulatory requirementsOversee incident response planning and execution, including investigation, containment, eradication, and post-mortem analysis of cloud, information system, and email compromise activityConduct regular risk assessments and ensure appropriate mitigation plans are in placeUphold and enforce the high-quality standards provided by Tier I and II support staff with internal and external users, including managing helpdesk staff and serving as point of escalation as requiredEnsure team follows processes such as IT onboarding and offboarding, working collaboratively with other departments to improve processesEnsure compliance with relevant laws, regulations, and frameworks (e.g., ISO 27001, CMMC Levels I and II, HITRUST e1 and r2, NIST, GDPR, HIPAA, SOC 2)Collaborate with IT, business stakeholders, and third parties, including clients, to integrate security best practices into infrastructure and application designManage third-party security tools and services (e.g., SIEM, endpoint protection, firewalls)Lead security awareness training and education and phishing exercises across the organizationPrepare and present security metrics and reports to executive leadershipOversee vulnerability, patch management, and organizational backup programsEvaluate emerging security technologies and recommend investments aligned with business goalsPerform security assessments of vendors, applications, and processes as they integrate with Amida's operational environmentMaintain and manage a 'low-risk' cyber score for cyber insurance suitabilityOther duties as assignedRequired Education:Bachelor's degree in computer science, information security, or a related fieldRequired Experience:At least 10 years of experience in IT security, with at least 3 years in a managerial or leadership roleExperience managing incident response and leading forensic investigationsRequired Skills:Strong knowledge of security architecture, network and endpoint security, cloud security (e.g., AWS, Azure, or GCP), and identity and access managementFamiliarity with governance, risk, and compliance (GRC) practicesTechnical writing of deliverables for executive and technical team audiencesExcellent communication, leadership, and interpersonal skillsVendor, applications, and supply chain cyber risk assessment experiencePreferred:Industry certifications such as CISSP, CISM, CISA, or equivalent are strongly preferredExperience in regulated industries (finance, healthcare, national security components etc.)Familiarity with DevSecOps practices and secure software development life cycle (SDLC)Knowledge of Zero Trust architecture principlesMaster's degree in computer science, information security, or a related fieldSuccess at AmidaCommunication is the key to success at Amida. Our people are known for their can-do attitude and their ability to work effectively with both internal and client teams. We pride ourselves on having a collegial, multidisciplinary team with diverse backgrounds and experience. Our best team members pay intense attention to detail in all aspects of their work, have great initiative, are opinionated about the best ways of doing things, and align quickly to decisions. A sense of humor is an asset at Amida. Full-time, regular employees at Amida enjoy a robust benefits package that includes a generous 401(k) match with immediate vesting, 4 weeks of PTO, paid parental leave, medical insurance, dental insurance, vision insurance, life/AD&D insurance, and short-term disability. We also offer tuition/training assistance and team-building opportunities to encourage professional growth and collaboration.All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.