Sr. Manager of Information Security

Date: Jan 24, 2023

Location: Columbus, OH, US, 43202

Company: American Chemical Society

CAS uses intuitive technology, unparalleled scientific content and unmatched human expertise to help companies create groundbreaking innovations that benefit the world. As the scientific information solutions division of the American Chemical Society, CAS manages the largest curated reservoir of scientific knowledge, and for 115 years, has helped innovators mine, assess and apply that information to keep businesses thriving. The CAS team is global, diverse, endlessly curious and strives to make scientific insights accessible to innovators worldwide.


CAS is currently seeking a Sr. Manager of Information Security.  This position will be located in our headquarters in Columbus, Ohio.


As our company grows and we expand our team, ACS is looking for an exceptional Sr. Manager of Information Security specialized in locking down our corporate assets and network. You'll be joining a team where you have real ownership and a charter to champion best practices, drive change and determine future policy and architecture. You will assess threats and vulnerabilities, analyze data and code, define measurable objectives, and drive implementations of security solutions. You will also be responsible for building and implementing testing tools and methodologies, including manual and automated processes, deployment, and monitoring. This position exists to ensure the safeguarding of all intellectual property and information systems assets throughout the organization. It is a unique position requiring leadership, innovation, and the ability to make difficult decisions that balance risk with business needs and strategic goals.



· Analyzes technologies and establishes highly effective processes and protocols to ensure comprehensive protection exists to prevent unauthorized entry into the company networks and systems.

· Supports automation and orchestration to maximize team talent and reduce routine tasks.

· Actively recruits and leads by example to create a culture where employees want to work.

· Mentors security team and places a heavy emphasis on employee retention – people, first.

· Conducts independent verification and validation testing of the company networks and sensitive programs through internal team resources and independent consultant engagements.

· Leads the team to implement secure enterprise systems and identifies issues that could compromise data integrity or security.

· Develops IT security programs and recommends necessary changes to the information security team to ensure the company’s systems are fully compliant with all applicable regulatory requirements and privacy laws.

· Facilitates third-party audit reviews of internal departments.

· Provides periodic training to company employees on information security topics.

· Participates in the company’s change management program.

· Stays abreast of the security industry threat landscape, specifically within the company’s industry.

· Recognizes his/her personal developmental needs and is proactive in obtaining the coaching, networking and training needed to ensure his/her continued success in the position.

· Creates a working environment that is conducive to two-way communication, teamwork and learning.

· Recognizes the varying strengths, skills and needs of the team and adapts his/her coaching skills to obtain the best possible results from each individual contributor.

· Openly supports the organization, the management team and executive leadership team, even during times of adversity.

· Utilizes open communication and managerial courage to ensure the standards, expectations and goals of the organization are respected and upheld.

· Acts as a change agent and drives the department and business forward using effective management, analysis and strategic skills.

· Leads security-related projects from inception to successful completion and is capable of effectively coaching technology staff on appropriate security protocols and needs as they implement new technology into the organization.

· Oversees the investigation of security incidents and assists with disciplinary and legal matters associated with such incidents as necessary. Works closely with Senior Management, Security Staff and Human Resources.

· Works with outside consultants as appropriate for independent security assessments and audits.

· Maintains relationships with local, state and federal law enforcement and other related Information Security agencies.

· Assumes responsibility for other duties as required or assigned.


Skills and Experience:

· Preferably 6-8+ years of technical experience, with at least 3-5 years in a team lead or supervisor role.

· Demonstrates strong written and oral communication skills.

· Understands service design and delivery concepts.

· Demonstrates solid organizational skills and the ability to multi-task, prioritize workload and delegate responsibilities.

· Effectively manages stress in a constantly changing environment.

· Leverages subject matter expertise in security and compliance.

· Demonstrates excellent judgment and the ability to make quick decisions and think outside the box when working with complex situations.

· Demonstrates a high level of flexibility.

· Is forward thinking and possesses business acumen.

· Possesses a high level of integrity, trustworthiness and confidence, and represents the company and its management team at the highest level of professionalism.

· Demonstrates strong analytical skills and is effective at interpreting and applying applicable regulation(s).

· Works effectively with a variety of personalities and can adapt his/her approach to effectively reach and develop his/her team. Uses this skill as well as his/her functional knowledge to both earn and maintain a high level of credibility with the team.


Education Requirements:

· Bachelor’s degree in computer science, information assurance, MIS or related field, or equivalent not required but preferred.


Experience Requirements:

· 6-8+ years of related experience required


Certification Requirements:

· CISSP (preferred); CISM (preferred); SANS certification a plus; or relevant industry experience


CAS offers a competitive salary and comprehensive benefits package, including a generous vacation plan, medical, dental, vision insurance plans, and employee savings and retirement plans.  Candidates for this position must be authorized to work in the United States and not require work authorization sponsorship by our company for this position now or in the future.  EEO/Minority/Female/Disabled/Veteran

Nearest Major Market: Columbus

Job Segment: Information Security, Information Technology, IT Manager, Computer Science, Information Systems, Technology