Information Security Manager

About Trailstone

Trailstone is a global energy and technology company, operating at the intersection of renewable and conventional power. We trade energy in global markets, and we provide a best-in-class service to manage the inherent intermittency of renewable power generation across the short, medium and long term.

As an energy trader, we buy and sell electricity and gas which is physically delivered on the grids, and we leverage our physical market knowledge to trade financial commodities.

As a provider of renewable energy management services, we take on the complexity of managing renewable power across different countries so that our customers can focus on their core mission of investment and growth. Trailstone offers an efficient, fully automated front-to-back renewable power management platform underpinned by our long-standing market experience, proprietary technology, data analytics and meteorology.

About the role

We are looking for an Information Security Manager to implement and maintain our security systems as well as build our Information Security Team as we grow. You will be responsible for all aspects of information security and expected to be hands on as the organization grows and your team is hired.

The role offers a chance to take a great deal of ownership and autonomy over our information security systems and practices, whilst working as part of an international, multi-disciplinary, and collaborative team!

Responsibilities

• Manage firewall, intrusion detection and prevention systems.
• Manage vulnerability scanning and remediation plans.
• Protect information systems against unauthorized access.
• Configure log aggregation and review logs for security events.
• Install, configure, and manage network security software.
• Review system configurations and advise on security best practices.
• Monitor network activity to identify issues early and communicate them to IT teams.
• Act on security breaches and malware threats.
• Serve as a security expert and conduct training when needed.
• Support the creation and maintenance of security policies and procedures.
• Conduct internal and external security audits.
• Monitor and respond to emerging threats and ongoing best practices changes.

Requirements

• Substantive working experience in an information security role, with 4 or more years IT or development experience.
• Proficiency with Fortigate firewalls and Cisco networking and security systems.
• Skills in designing countermeasures to identified security risks.
• Ability to apply network security architecture concepts including topology, protocols, components, and principles.
• Experience with Single-Sign-On (SSO) identity federation and protocols, including Radius, MS AD (join-based), LDAP/OpenLDAP, and SAML (including MS Azure-based SAML).
• Familiarity with public key infrastructure (PKI) and cryptographic protocols (e.g. SSL/ TLS).
• Ability to work predominantly from one of our global offices.
• Experience with hiring and building a team

Traits

• Prefer one or more of the following industry certifications: Certified Information Systems Security Professional (CISSP); CISM (Certified Information Security Manager); CRISC (Certified in Risk and Information Systems Control); SSCP (Systems Security Certified Professionals), CompTIA Security , and/or Certified Business Continuity Professional.
• Prefer familiarity with security frameworks (e.g. NIST 800-53, KritisV, ISO 27001, etc.) and risk management methodologies
• Excellent report writing and communication skills.
• Strong analytical, problem solving and troubleshooting skills.
• Ability to work both independently and with a cross-functional team.
• Availability to travel, possibly internationally (once COVID-19 travel restrictions are lifted).

We’re different, and we like it that way!

Here at Trailstone, we value our differences. In fact, our success depends upon them.

Differences in backgrounds, identities and experiences lead to differing views of the world.  Different world views lead to healthy differences in opinions. Different opinions are essential to creating a robust marketplace of ideas. And it is our ideas that will make Trailstone a market leader in energy innovation and disruption!

By our commitment to a diverse and inclusive workforce, Trailstone is creating value for our employees, our investors, and our communities.

So regardless of your gender, race, ethnicity, orientation, physical limitations, how you identify, how you pray, who you love, where you went to school, who you consider family, or how old you are… you can belong here!