Goodwill Industries of South Florida · 8 hours ago
IT Security Manager
Miami, FL
Full-time
Onsite
Senior LevelGoodwill Industries of South Florida is seeking an IT Security Manager to lead the enterprise's security operations and strategy. The role involves managing the SOC team, overseeing security solutions, and ensuring compliance with security policies and regulations.
ApparelLaundry and Dry-cleaningLogisticsNon Profit
Responsibilities
Create and maintain the enterprises security architecture design
Create and maintain the enterprises security awareness training program
Maintain the enterprises security documents policies, standards, baselines, guidelines, and procedures
Create and maintain the enterprises Business Continuity Plan and Disaster Recovery Plan where appropriate
Maintain up to date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors
Select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise security as per the enterprises existing procurement processes
Oversee the deployment integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprises security documents specifically
Manage daily operation of core security technologies SIEM IDS IPS EDR MFA MDM vulnerability scanners
Ensure the confidentiality integrity and availability of the data residing on or transmitted to from through enterprise workstations servers and other systems and in databases and other data repositories
Perform regular security awareness training for all employees to ensure consistently high levels of compliance with enterprise security documents
Owns and administers Microsoft Entra ID identity protections Conditional Access policies MFA enforcement least privilege access and privileged role governance
Performs hands on reviews of access logs sign in risks and user lifecycle workflows
Leads enterprise wide access reviews mandated by audit and compliance frameworks
Implements and maintains Microsoft Secure Score and Compliance Score improvements
Oversees Microsoft Purview Data Loss Prevention DLP Information Protection Sensitivity Labels Insider Risk Management and retention policies
Ensures secure cloud configurations align to CMMC ISO and internal audit expectations
Designs maintains and tunes Sentinel analytic rules automation playbooks data connectors and workbooks
Performs deep dive KQL log analysis for incidents anomalies and threat hunts
Leads the correlation of Microsoft telemetry Entra Defender XDR M365 Azure into actionable alerts
Uses Microsoft Defender Vulnerability Management to identify prioritize and remediate system weaknesses
Coordinates with Infrastructure and Desktop teams to enforce secure baselines and patch compliance across Windows Azure workloads and cloud applications
Serves as the primary responder for Microsoft originated alerts Defender XDR Sentinel Purview IRM events
Executes automated and manual remediation actions isolate device revoke tokens kill processes block hashes etc
Other duties as assigned
Qualification
Required
Experience managing a Security Operations Center (SOC) team
Expertise in Microsoft security ecosystem including Azure AD Entra, Microsoft Defender XDR, Intune, Sentinel, and Microsoft 365 compliance tools
Ability to create and maintain security architecture design
Experience in developing and maintaining security awareness training programs
Knowledge of IT security industry trends, new security solutions, and threat vectors
Experience in deploying and configuring security solutions
Management of core security technologies such as SIEM, IDS, IPS, EDR, MFA, MDM, and vulnerability scanners
Ability to ensure confidentiality, integrity, and availability of data
Experience in conducting regular security awareness training for employees
Knowledge of Microsoft Sentinel SIEM and Log Analytics
Experience administering Microsoft Entra ID identity protections and Conditional Access policies
Ability to perform access log reviews and user lifecycle workflows
Experience leading enterprise-wide access reviews for audit and compliance
Ability to implement and maintain Microsoft Secure Score and Compliance Score improvements
Experience overseeing Microsoft Purview Data Loss Prevention and Information Protection
Knowledge of secure cloud configurations aligning with CMMC, ISO, and internal audit expectations
Experience designing and maintaining Sentinel analytic rules and automation playbooks
Ability to perform KQL log analysis for incidents and threat hunts
Experience correlating Microsoft telemetry into actionable alerts
Experience using Microsoft Defender Vulnerability Management
Ability to coordinate with Infrastructure and Desktop teams for secure baselines and patch compliance
Experience in incident response for Microsoft originated alerts
Company
Goodwill Industries of South Florida
Miami | Ft. Lauderdale | Keys - Your support funds job training for people with disabilities & other barriers to work.
Founded in 1959
1001-5000 employees
Funding
Current Stage
Late StageLeadership Team
David Landsberg
CEO
Mauricio Hernandez
Chief Operating Officer
Recent News
Seattle TechFlash
2025-04-11
Company data provided by crunchbase