Senior Manager, Cybersecurity - Technology & Engineering (REMOTE)

 

McCormick & Company, Inc., a global leader in the spice, flavor, and seasonings industry, is seeking a full-time Senior Manager, Cybersecurity - Technology & Engineering. The Senior Manager, Cybersecurity - Technology & Engineering will report to the Director, IT Operations Technology. This new hire will work at McCormick's global headquarters in Hunt Valley, MD and will be eligible to participate in McCormick's hybrid work program (50% onsite and 50% remote per month). 

 

McCormick & Company, Incorporated is a global leader in flavor with approximately 14,000 employees worldwide. With over $6 billion in annual sales across 160 countries and territories, we manufacture, market, and distribute spices, seasoning mixes, condiments, and other flavorful products to the entire food industry including e-commerce, retail, food manufacturers and foodservice businesses. Our most popular brands include McCormick, French's, Frank's RedHot, Stubb's, OLD BAY, Lawry's, Zatarain's, Ducros, Vahiné, Cholula, Schwartz, Kamis, DaQiao, Club House, Aeroplane, and Gourmet Garden. Every day, no matter where or what you eat or drink, you can enjoy food flavored by McCormick. Our Purpose is "To Stand Together for the Future of Flavor and our Vision is "A World United by Flavor—where healthy, sustainable and delicious go hand in hand."

 

As a company recognized for its exceptional commitment to employees, McCormick offers a wide variety of benefits, programs, and services. Benefits include, but are not limited to, tuition assistance, medical, dental, vision, disability, group life insurance, 401(k), profit sharing, paid holidays, and vacations.

 

Please Note: This is a remote role and can be based anywhere in the US or Canada

 

 

POSITION OVERVIEW:

 

The Senior Manager, Cybersecurity – Technology and Engineering leads a global team providing network, cloud, Operational Technology (OT), engineering and operations security functions. They align with defined policies, standards to ensure McCormick’s digital asset protection globally and are responsible for the creation, tracking and trending of performance metrics of the services delivered under their remit as directed by the Director of IT/OT Security.  The Cybersecurity Senior Manager ensures the security and availability of McCormick's information assets and IT services through leadership of one or more core functions of the NIST Cybersecurity Framework including Identify, Protect, Detect, Respond and Recover. Requiring a high degree of technical expertise and the ability to effectively assess cyber threats and risks both at a technical level and at an enterprise level, the Sr. Manager makes timely decisions regarding the prioritization of cybersecurity capability investments and the selection, design and implementation of business appropriate, highly complex technology solutions and controls. Decisiveness is required on a regular basis, many times under highly stressful conditions, to effectively respond to rapidly changing external conditions that could quickly threaten McCormick's ability to conduct business. The nature of cyberthreats could cause an enterprise-jeopardizing situation to manifest itself within a matter of minutes or hours with no advance warning. In several cases each year, this level of rapid decision-making ability is required during situations where McCormick's information assets, IT services and networks are under active attack by malicious cyber threat actors and hackers. The Sr Manager must establish and execute against a strategic plan that achieves the optimal balance of Identifying, Protecting, Detecting, Responding and Recovering regarding McCormick's information assets and IT services. This position is responsible for the direct management of a global team including highly technical internal resources and third parties.

 

 

RESPONSIBILITIES:

Operations - ITSM, Security IR & On-Call

• Manage the technical and functional delivery of Security Services according to established ITSM SLAs, processes, and practices.
• Manage team resources to provide 24x7 support for priority incidents and projects that may require after hours work. Provide an escalation point for critical and urgent items and redirect or engage others as needed for proper resolution or hand-off.
• Review, assess and approve change management requests presented by the team and interact with IT and business teams to ensure alignment on risk, impacts and communications as necessary.
• Promptly report and participate in cybersecurity incidents, tabletop exercises and CSIRT processes.

Projects & Delivery

• Sponsor, lead, resource manage and at times project manage IT/Security projects.
• Provide reasonable estimates and forecasts of project resources, infrastructure and/or services a