IT Manager, Security Operations

Overview

Johnstone Supply, North America's leading wholesale distributor of HVACR equipment, parts, and supplies, has a great opportunity to join our team. Over the last seven decades, Johnstone has grown into a multi-billion-dollar industry leader with over 470 distributor branches and 6 distribution centers throughout North America. We work with some of the largest companies in the world, including Daikin/Goodman, Bosch, Copeland, Honeywell, Johnson Controls, and Fujitsu, to provide contractors with world-class products, technical expertise, and quality service.

Now is the best time to join Johnstone Supply. Relationship-building is the key to our success, and it shows in everything we do. The Power of Johnstone is everyone who works with us. Our customers, our partners, and our people. Johnstone is growing, and so can you.

The IT Manager of Security Operations will manage, coach, and develop a team of IT Security Operations professionals, fostering a culture of accountability, continuous learning, and operational excellence. Will provide leadership in performance management, employee engagement, succession planning, and capability development while ensuring the team effectively monitors, analyzes, and responds to cybersecurity threats in support of business objectives.

Responsibilities

• Responsible for analyzing systems and networks to determine deviations from approved policies and configurations.
• Supports and coaches team members on effective methods to research and evaluate incident response procedures and capabilities.
• Conducts security scans, examines system configurations, and reviews documentation of incident response procedures.
• Analyzes identified malicious network activity to determine weaknesses exploited, exploitation methods, and the effects on the system.
• Plans and designs security solutions that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities.
• Defines and develops security requirements using risk assessments, threat modeling, testing, and analysis of existing systems.
• Manages the security integration plans to protect existing infrastructure and to incorporate future solutions.
• Reviews and implements action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats.
• Partners and collaborates with stakeholders to encourage the adoption of security-compatible software designs and best practices.
• Keeps abreast of the latest intelligence from law enforcement and other sources of cyber threat information.
• Responsible for ensuring the security of the organization's systems and information assets.
• Monitors the development and implementation of security systems, guidelines, and strategies.
• Protects against unauthorized access, use, disclosure, disruption, modification, and/or destruction.
• Conducts and reviews audits and risk assessments.
• Evaluates internal operations and controls and makes recommendations based on the findings.
• Migrates non-compliant environments to compliant environments.
• Ensures compliance with data protection guidelines and applicable laws.
• Performs all other duties as assigned.

Qualifications

Education and/or Experience:

• Required:
  • 10+ years of technical hands-on security and/or other IT-based experience.
  • 3+ years in a Lead or Supervisor/Manager role.

Certificates, Licenses, and Registrations:

• CISSP, GSOM, ITIL Foundations (preferred).

Job Knowledge, Skills, and Abilities:

• Utilizes appropriate written and oral communication skills for the subject matter and audience.
• Understands service design and service delivery concepts.
• Demonstrates strong organizational skills and the ability to multi-task, prioritize workload, and delegate responsibilities.
• Leverages subject matter expertise in security, as well as compliance as needed.
• Experience with Payment Card Industry (PCI) compliance and audit.
• Strong understanding of Security Domains such as Firewalls, Zero Trust, Email Hygiene, Identity and Access Management, Endpoint Security, and Incident Response.
• Understanding of security frameworks (NIST 2.0) and SOX Audit requirements.
• Effectively manages in a constantly changing environment.
• Demonstrates excellent judgment, the ability to make quick decisions, and think outside the box when working with complex situations.
• Demonstrates a high level of flexibility.
• Is forward thinking and possesses strong business acumen.
• Possesses a high level of integrity, trustworthiness, and confidence, and represents the company and its management team at the highest level of professionalism.
• Demonstrates strong analytical skills and is effective at interpreting and applying applicable regulation.
• Works effectively with a variety of personalities and can adapt his/her approach to effectively reach and develop his/her team. Uses this skill as well as his/her functional knowledge to both earn and maintain a high level of credibility with the team.
• While multilingual skills are valued, English proficiency (written and spoken) is a core requirement for this position due to the nature of the work, safety regulations, and to ensure accurate communication and comprehension.

Physical Demand

While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle, and/or feel; flex hands and fingers; reach with hands and arms; turn head and torso; and talk or hear. The employee is occasionally required to walk. Specific vision requirements are close and peripheral vision.

Company Values

We’re also interested in hiring a great candidate that holds these values so we can further build a strong company culture:

• Safety: Always prioritizes safety, both at work and at home, while ensuring those who work for you work safely.
• Customer Focused: Take the perspective of those we serve, anticipate their needs, and responding quickly.
• One Team: We win together by collaborating with each other, focusing on the common goal, and leveraging the strengths of the team.
• Own It: Take the initiative, act with a sense of urgency and pride, do things right the first time, and always act with integrity.
• Innovate: Embrace and create change that drives continuous improvement and customer-valued solutions.

Benefit Overview

At Johnstone Supply, we recognize that our employees’ growth, well-being, and success drives the company’s success. We offer a competitive wage, in addition to health and wellness benefits including medical, dental, vision coverage, and options for supplemental care. We provide the resources you need to take charge of your well-being, including:

• Competitive Paid Time Off (PTO)
• Safe Harbor 401(k) - 100% employer match up to 5% of base pay and immediate vesting
• Holiday pay - we recognize and pay our employees for 7.5 holidays per year
• Paid Parental Bonding Time
• Employer subsidized medical, dental, and vision plans
• Employer paid life insurance and short-term disability
• Voluntary long-term disability, accident, critical illness, and hospital indemnity insurance
• 24/7 Access to virtual care/telehealth options
• Health Savings Account (HSA) with employer contribution; Flexible spending accounts (FSA)
• Wellbeing program with opportunity to earn reduced medical costs
• Employee Assistance Program (EAP) for you, and your family
• Tuition reimbursement
• Employee referral bonus program
• Employee service milestone recognition program

We understand that our employees are the cornerstone of our success. Our commitment to continuous improvement & investment in our people is only matched by our commitment to superior customer experience.

EOE & E-Verify Participating Employer.