IT Manager (Security focus)

The IT Manager will have overall responsibility for the company’s IT infrastructure, information security, and day-to-day technology operations. This includes networks, servers, endpoints, cloud services, identity management, cybersecurity, and helpdesk functions.

A key focus of this position is ownership of the company’s ISO 27001 program. The successful candidate will bring strong, hands-on knowledge of ISO 27001 and will lead the organization through the development, implementation, governance, and continuous improvement of its ISMS. This includes risk assessments, control implementation, documentation, internal audits, and preparation for certification and surveillance audits.

This is an ideal opportunity for a security-focused IT leader who enjoys a hands-on environment and wants to take ownership of an ISO 27001 program while supporting the technology needs of a growing manufacturing organization., * Lead and oversee the company’s IT infrastructure, including networks, servers, storage, virtualization, endpoints, cloud services, and SaaS applications.

• Own and manage the company’s information security program, including policies, risk assessments, access controls, vulnerability management, incident response, and security awareness.
• Lead the ISO 27001 program from gap assessment through certification and ongoing compliance.
• Develop and maintain the ISMS, including risk treatment plans, Statement of Applicability (SoA), policies, procedures, and supporting documentation.
• Lead ISO 27001 control implementation, internal audits, corrective actions, and certification/surveillance audit preparation.
• Serve as the company’s subject-matter expert on ISO 27001, advising leadership on risks, controls, compliance requirements, and the overall security roadmap.
• Manage and mentor IT support personnel while ensuring effective and timely helpdesk operations.
• Establish and maintain IT policies, standards, and procedures related to acceptable use, data protection, backup/recovery, change management, and security.
• Oversee identity and access management, including Active Directory/Azure AD, MFA, role-based access, and least-privilege principles.
• Monitor network and system security, investigate incidents, document findings, and lead remediation efforts.
• Develop and maintain business continuity and disaster recovery plans, including backup strategies, testing, and documentation.
• Manage relationships with IT vendors, managed service providers, and technology suppliers, including contracts, licensing, and service agreements.
• Partner with company leadership to develop IT and security strategies that support business objectives and organizational growth.
• Evaluate and implement new technologies that improve operational efficiency, cybersecurity, reliability, and scalability.
• Manage the IT budget, including hardware and software procurement, licensing, and capital planning.
• Maintain awareness of applicable data protection, cybersecurity, and industry requirements relevant to the manufacturing environment.
• Balance hands-on technical responsibilities with team leadership, strategic planning, and long-term technology initiatives.

• Bachelor’s degree in Information Technology, Computer Science, Information Security, or a related field, or equivalent professional experience.
• 5-10 years of progressive IT experience, including at least 3 years in a management or supervisory capacity.
• Strong experience with network administration, server infrastructure, cloud environments, and endpoint management.
• Demonstrated experience developing, implementing, or maintaining an information security program.
• Strong, hands-on expertise with ISO 27001 is required.
• Demonstrated knowledge of ISO 27001 risk assessment methodologies, Annex A controls, Statement of Applicability, ISMS documentation, and internal/external audit processes.
• Proven experience leading or significantly contributing to an ISO 27001 certification or recertification effort from initial gap assessment through successful audit.
• Experience with identity and access management, MFA, role-based access, and least-privilege security models.
• Strong understanding of backup, disaster recovery, and business continuity practices.
• Experience managing IT vendors, contracts, software licensing, and budgets.
• Strong leadership, communication, organizational, and problem-solving skills.
• Ability to communicate technical risks and security requirements effectively to business leadership.
• Demonstrated ability to work hands-on while also managing a team and developing long-term IT and security strategies., * ISO 27001 Lead Implementer or Lead Auditor certification.
• CISSP, CISM, Security+, or other relevant IT/security certifications.
• Previous IT leadership experience within a manufacturing or industrial environment.
• Familiarity with IT/OT security considerations within a manufacturing environment.
• Experience with ERP systems and securing business-critical applications.
• Experience with SIEM platforms, vulnerability scanning, security monitoring, and other cybersecurity tools.
• Experience leading a successful ISO 27001 certification effort from gap assessment through audit.

Work Environment & Physical Requirements

• Primarily an office-based position within a manufacturing facility.
• Occasional work may be required in server/network rooms and on the manufacturing floor.
• Ability to occasionally lift and move IT equipment weighing up to 25 pounds.
• Standard business hours with occasional after-hours availability for critical IT outages, security incidents, or other urgent situations.

Pulled from the full job description

• Tuition reimbursement
• 401(k)
• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance, * 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Tuition reimbursement
• Vision insurance