IT Security Manager

About the Role:

As an IT Security Manager, you will independently lead comprehensive cybersecurity efforts within the organization. Your specialized skills will ensure the highest standards of security are upheld. You’ll be pivotal in shaping our security posture, addressing advanced security challenges, and supporting team projects with your expertise.

Wolters Kluwer Global Business Services (GBS) is designed to provide services to the business units in the areas of technology, sourcing, procurement, legal, finance, and human resources. These global centers promote team collaboration using best practices around a specific focus area to drive results and enhance operational efficiencies. There is a constant endeavor to benchmark against best-in-class industry standards to improve the quality of deliverables, increase cost savings, enhance productivity, and reduce time to market for products and applications.

We have an amazing opportunity for an IT Security Manager (Problem Management), available within our Global Business Services division! The IT Security Manager (Problem Management) will be responsible for identifying, analyzing, and managing the underlying causes of security incidents and events, ensuring the long-term protection and enhancement of the confidentiality, integrity, and availability of Wolters Kluwer assets.

As the IT Security Manager (Problem Management), you will lead information gathering and analytical efforts following suspected and confirmed security incidents to determine root cause and implement preventative measures to protect personal and confidential information at WK. In this role, you will be required to demonstrate proficiency in problem analysis, root cause investigation, data correlation, and information synthesis across all areas of IT security management. Your role will also include interfacing with and responding to internal business unit IT representatives and stakeholders at all levels to address systemic security issues, reduce recurrence of incidents, and improve overall security posture.

Responsibilities:

• Primarily responsible for the identification, analysis, and management of underlying causes of information security incidents, acting as the focal point leading problem management efforts and ensuring effective actions are taken to prevent recurrence
• Supports the transition from incident response to structured problem management, in coordination with WK global security operations, driving root cause analysis (RCA) for significant or recurring security incidents
• Contributes to the analysis and delivery of findings to internal customers with impactful, comparative, interpretative security analysis in a clear, consistent, and factual manner, with a focus on long-term risk reduction
• Responsible for establishing communications bridges and meetings in support of problem investigation and remediation efforts
• Responsible for maintaining proper group focus during problem analysis activities and redirecting efforts in support of timely identification of root cause and permanent resolution
• Responsible for aggregating information relevant to security incidents and associated trends, synthesizing probable root causes, systemic issues, and control gaps
• Responsible for developing and recommending the best course of action based on solid security principles, focusing on permanent fixes and prevention of recurrence
• Drives the problem management process from identification through root cause determination, known error documentation, and implementation of permanent corrective actions
• Accountable for documenting all WK and partner activity related to problem investigations, root cause findings, and remediation actions
• Responsible for ensuring appropriate post-incident (post-mortem) and lessons-learned sessions are conducted, with emphasis on identifying root causes and preventive controls following restoration of service
• Responsible for organizing and taking part in cross-functional problem review and incident exercise activities, ensuring that policy and procedure are followed and continuously improved
• Responsible for ensuring knowledge of IT security, emerging threat scenarios, and industry best practices in problem management is current
• Responsible for ensuring information arising from problem management activities, including required configuration changes or control enhancements, is communicated to the proper operational contacts for execution
• Accountable for establishing and maturing the Security Problem Management capability, ensuring alignment with ITIL best practices and integration across Security Operations, Engineering, and Enterprise IT functions
• Drives strategic reduction of security risk by identifying systemic control gaps and ensuring sustainable remediation across technologies, platforms, and business units
• Leads the development and governance of problem management KPIs and KRIs, including reduction in recurring incidents, time to root cause, and time to permanent fix, and reports progress to senior leadership
• Establishes and chairs a cross-functional Security Problem Review Board, ensuring prioritization, accountability, and executive visibility for high-risk and systemic security issues
• Partners with senior stakeholders across business units, technology teams, and third-party providers to drive accountability for remediation activities and ensure alignment with enterprise risk tolerance
• Influences and informs security strategy by translating problem management findings into actionable improvements to security architecture, controls, and operational processes
• Ensures alignment with enterprise risk management, audit, and compliance requirements, supporting frameworks such as NIST, ISO, and internal WK governance standards
• Drives continuous improvement across the incident and problem management lifecycle, identifying opportunities for automation, tooling enhancements, and process optimization
• Provides leadership and mentorship to analysts and team members engaged in problem analysis activities, fostering a culture of accountability, analytical rigor, and continuous learning
• Acts as an escalation point for high-impact or complex security problems, ensuring appropriate prioritization, executive communication, and timely resolution