IT Security Manager

Responsibilities

• Primarily responsible for the identification, analysis, and management of underlying causes of information security incidents, acting as the focal point leading problem management efforts and ensuring effective actions are taken to prevent recurrence
• Supports the transition from incident response to structured problem management, in coordination with WK global security operations, driving root cause analysis (RCA) for significant or recurring security incidents
• Contributes to the analysis and delivery of findings to internal customers with impactful, comparative, interpretative security analysis in a clear, consistent, and factual manner, with a focus on long-term risk reduction
• Responsible for establishing communications bridges and meetings in support of problem investigation and remediation efforts
• Responsible for maintaining proper group focus during problem analysis activities and redirecting efforts in support of timely identification of root cause and permanent resolution
• Responsible for aggregating information relevant to security incidents and associated trends, synthesizing probable root causes, systemic issues, and control gaps
• Responsible for developing and recommending the best course of action based on solid security principles, focusing on permanent fixes and prevention of recurrence
• Drives the problem management process from identification through root cause determination, known error documentation, and implementation of permanent corrective actions
• Accountable for documenting all WK and partner activity related to problem investigations, root cause findings, and remediation actions
• Responsible for ensuring appropriate post-incident (post-mortem) and lessons-learned sessions are conducted, with emphasis on identifying root causes and preventive controls following restoration of service
• Responsible for organizing and taking part in cross-functional problem review and incident exercise activities, ensuring that policy and procedure are followed and continuously improved
• Responsible for ensuring knowledge of IT security, emerging threat scenarios, and industry best practices in problem management is current
• Responsible for ensuring information arising from problem management activities, including required configuration changes or control enhancements, is communicated to the proper operational contacts for execution
• Accountable for establishing and maturing the Security Problem Management capability, ensuring alignment with ITIL best practices and integration across Security Operations, Engineering, and Enterprise IT functions
• Drives strategic reduction of security risk by identifying systemic control gaps and ensuring sustainable remediation across technologies, platforms, and business units
• Leads the development and governance of problem management KPIs and KRIs, including reduction in recurring incidents, time to root cause, and time to permanent fix, and reports progress to senior leadership
• Establishes and chairs a cross-functional Security Problem Review Board, ensuring prioritization, accountability, and executive visibility for high-risk and systemic security issues
• Partners with senior stakeholders across business units, technology teams, and third-party providers to drive accountability for remediation activities and ensure alignment with enterprise risk tolerance
• Influences and informs security strategy by translating problem management findings into actionable improvements to security architecture, controls, and operational processes
• Ensures alignment with enterprise risk management, audit, and compliance requirements, supporting frameworks such as NIST, ISO, and internal WK governance standards
• Drives continuous improvement across the incident and problem management lifecycle, identifying opportunities for automation, tooling enhancements, and process optimization
• Provides leadership and mentorship to analysts and team members engaged in problem analysis activities, fostering a culture of accountability, analytical rigor, and continuous learning
• Acts as an escalation point for high-impact or complex security problems, ensuring appropriate prioritization, executive communication, and timely resolution

Our Interview Practices