IT Manager - Systems Security

Company: Nelnet
Location: Remote
Posted on: June 12, 2021

Job Description:

Nelnet is a student loan servicer that's grown into a fiber internet pioneer, real estate investor, and software provider. But that's just the beginning. With 6,500 associates and growing, we take our business wherever superior customer experiences and ingenuity are needed.

The perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team, you're part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.

This position will design and implement physical and logical security efforts across NBS. The position will take a proactive approach to managing security including oversight of security planning, policy and procedure development, PCI and other compliance, and will implement policies and procedures. Security responsibilities will include network security architecture, network access and monitoring policies, application security awareness, physical security, social engineering practices, and employee education and awareness. The position will coordinate with Corporate Security Group (CSG) to ensure that NBS is compliant with all Nelnet security polices, as well as extend existing policies and develop new policies specific to NBS and its business.

• Identifying risks and threats to the potential disclosure, modification or loss of data.
• Conduct vulnerability assessments across the NBS organization - data, telecommunications, software, procedures, facilities, etc. - all facets of organizational security.
• Scan systems for known vulnerabilities and exposures using commercial and open source vulnerability scanning tools.
• Review and evaluate systems to determine where security improvements are required.
• Recommend and implement countermeasures and safeguards to mitigate risk.
• Monitor and review technology and other initiatives to provide security assurance.
• Collaborate on the implementation of new technology to ensure adherence to information security standards and best practices.
• Manage and maintain security related technologies, processes and procedures.
• Make recommendations to improve security, and implement those recommendations.
• Establish security policies and standards.
• Be a resource to the technical and non-technical members of NBS in evaluating their own security measures.
• Take the lead on providing education for all NBS personnel with respect to Security.
• Ensure compliance with all applicable oversight authorities (NACHA, PCI, SOC, etc.).
• Provide input to the various audits and compliance functions in NBS.
• Lead the PCI, NACHA, SOC, and other audits for NBS.
• Oversee incident response planning and investigation of security breaches, and assist with disciplinary and legal matters associated with such breaches as necessary.
• Manage and operate NBS specific security systems.
• Provide support to the Incident Response Team.
• Remain up-to-date with latest computer crimes, security vulnerabilities and laws pertaining to information security.
• Develop and implement security awareness and training for all NBS personnel.
• Conduct firewall audits including rule usage and configurations to ensure proper and secure firewalls.
• Manage security projects, as necessary.
• Troubleshoot and triage possible security breaches.

EDUCATION:

• 4 year degree in Information Sciences or related field, with the ability to substitute related experience.
• One or more of CISSP, GIAC, Security+ certifications or equivalent experience.

EXPERIENCE:

• 4+ years of IT security experience.

COMPETENCIES - SKILLS/KNOWLEDGE/ABILITIES:

• Excellent analytical, critical thinking and investigative skills.
• Knowledge of networking architectures and protocols including the OSI layer.
• Familiarity with software development and significant security considerations around software development.
• Ability to speak to technical details and also the aptitude to convey technical and complex ideas to Management in way in which they will understand.
• Work well under minimal supervision; self-directed.
• Knowledge of PCI and NACHA regulations.
• Familiarity with current information security technologies and trends.
• Discretion in handling sensitive information.
• Ability to prioritize and manage multiple concurrent projects.
• Thorough understanding of operating systems and networking.

Colorado candidates: salary range $75,000-$130,000

Our benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: LINK.

Nelnet is an Equal Opportunity Employer, complies with Executive Order 11246, and takes affirmative action to ensure that qualified applicants are employed, and that employees are treated during employment, without regard to race, color, religion/creed, national origin, gender, or sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by Federal or State law or local ordinance. Qualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Nelnet Corporate Recruiting.

Qualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Corporate Recruiting at 402-486-5725 or corporaterecruiting@nelnet.net.

Nelnet is a Drug Free and Tobacco Free Workplace.

Keywords: Nelnet, Eugene , IT Manager - Systems Security, Other , Remote, Oregon