Information Security Program Manager

Full job description

The Team

We are seeking an Information Security Program Manager to join American Tower’s Information Security organization. The Information Security team maintains and enhances the information security program. Day to day, you will plan, direct, and coordinate security-related initiatives, including audits and risk assessments, assist with deploying various controls, and develop processes to ensure standards across the security configurations. You will work closely with business and technology leaders to prioritize, and sequence proposed projects, identify trade-offs, and obtain resource allocations to optimize the execution of the portfolio of information security projects within the program roadmap.

American Tower is a global digital infrastructure company serving customers through tower sites and other real estate solutions that support connectivity and opportunity, focused on achieving our vision of Building a More Connected World. Our success is rooted in the potential of our people and the power of local teams at our offices and sites across 25 countries.

We are one of the largest global Real Estate Investment Trusts (REITs) and a publicly traded (NYSE:AMT), Fortune 500 Company headquartered in Boston, Massachusetts. The next decade will be an exciting time as we evolve our infrastructure to meet tomorrow’s needs and position our people to elevate their impact, their potential, and our shared success. Come grow your career with us!

For more information about how American Tower is building a more connected world, visit americantower.com.

American Tower is proud to be an equal opportunity employer and will not discriminate against an applicant or employee based on age, sex, sexual orientation, gender identity, race, color, creed, religion, national origin or ancestry, citizenship, marital status, familial status, disability, military or veteran status, genetic information, pregnancy, reproductive decisions, or any other characteristic protected under applicable law.

What You Need to Succeed

• Bachelor's degree in Information Systems or Computer Science or equivalent work experience required
• A minimum of 5 years of IT, network security, or IT audit experience is required.
• Experience with general computer controls and security topics required.
• Experience developing, documenting, and maintaining access and security policies, processes, procedures, and standards preferred.
• Strong project/program management skills, which include experience organizing, planning, and executing from vision through implementation of large-scale programs and projects involving internal personnel, contractors, and vendors are required.
• Knowledge of access, security, and control risk assessment methods and technologies and/or audit experience required.
• Knowledge of information security standards (e.g., ISO 27001/27002, NIST, etc.) and data privacy and compliance regulations (e.g., GDPR, HIPAA, etc.) required.
• While performing the role you will need to lift up to 25 lbs.
• Approximately 10% of travel may be required to support the position’s responsibilities.
• Strong written and oral communication skills, including the ability to present ideas and suggestions clearly and effectively.
• Ability to work with different functional groups and levels of employees to effectively and professionally achieve results.
• Strong organizational skills: ability to accomplish multiple tasks within the agreed-upon timeframes through effective prioritization of duties and functions in a fast-paced environment.

What You Can Offer Us

• Review proposals or plans to determine projects’ time frames, funding limitations, procedures for completing, staffing requirements, and allotment of available resources to various phases.
• Run projects/programs from design and development to production by using program and project management theories, methods, and techniques applicable to managing and delivering programs or projects.
• Perform control and vulnerability assessments to identify weaknesses, assess the effectiveness of existing controls, and recommend enhancements.
• Protect systems by defining access privileges, control structures, and resources.
• Serve as a point of contact for IT and innovation teams to address control questions and assess control impacts on projects.
• Facilitate and coordinate ongoing reviews and audits with identified business owners and ensure appropriate actions are taken based on the information gathered during those reviews.
• Other duties as assigned.