JOB DESCRIPTION

Media.Monks is looking for a Cybersecurity Manager who is experienced, knowledgeable and passionate about discovering the best ways to protect our business from emerging technological threats against data security. This position will report to the global CISO and will work with a global scope. In an extremely dynamic industry which challenges security experts with new technologies and services developed for clients, we expect you can leverage your expertise to find creative solutions, raising our competitiveness in the marketplace and decreasing the most challenging cybersecurity risks. You will manage a team of technology experts in information security domains such as: cloud security, infrastructure security, identity access management (IAM), security incident management, vulnerability management, secure systems development lifecycle, among others.

PRIMARY RESPONSIBILITIES

• Manage the Cybersecurity team following the CISO´s expectations and guidance towards annual objectives and priorities.
• Partner with IT departments, Cloud Management teams, Software Development teams and other InfoSec teams to optimize communication, collaboration and resources.
• Advise the CISO in areas related to cybersecurity strategies, threats, best practices and improvement opportunities.
• Manage the continuous improvement of monitoring and alerting capabilities, as well as incident management.
• Manage DevSecOps efforts to improve security within the development lifecycle.
• Continually evaluate systems/platforms/SaaS/infrastructure security, identifying gaps and proposing solutions to fix them.
• Implement a risk oriented approach to prioritize work to guide Cybersecurity teams.
• Be the focal point for new projects or initiatives in order to incorporate security by design and ensure they are aligned with internal standards and client security requirements.
• Develop, implement, and maintain KPIs for measuring team progress and performance.
• Keep the CISO informed about the progress of the objectives, projects and tasks defined, as well as any blockers or drawbacks ahead.
• Participate in the planning, design, and evaluation of cybersecurity related projects and tools.
• Establish, deploy and manage an internal cybersecurity monitoring program which encompasses the complete technology stack.
• Engage withCompliance teams to coordinate activities oriented to assessing compliance of infrastructure, applications, systems and SaaS - in all environments - on-premise and cloud.
• Assists in the oversight of service providers including: proposal, selection, deployment, maintenance, evaluation and measurement.

   

KNOWLEDGE AND SKILL REQUIREMENTS

• 5+ years of experience managing a team in a similar position.
• 10+ years experience in cybersecurity or information security technology.
• Bachelor’s in Computer Science or Engineering with an emphasis in Information Security (post-graduate specialization is also accepted).
• Extensive knowledge of IT Infrastructure, network design, engineering and software architecture with a cybersecurity focus.
• Have a technical understanding of cybersecurity requirements based on NIST (National Institute of Standards and Technology) 800.53, CSF (Cybersecurity Framework), ISO/IEC 27001 and other control frameworks.
• Experience working with various project and portfolio management tools and methodologies, Agile/Scrum methods is a must.
• Strong hands-on experience deploying and managing security and network solutions such as SIEM (Security Information and Event Management), Email Security, Network Security, Endpoint Security, DLP (Data Loss Prevention), IPS/IDS (Intrusion Prevention & Detection Systems).
• Experience leading incident response activities and teams.
• Experience in managing cybersecurity in hybrid and multi cloud environments.
• Strong communication and collaboration skills working cross functionally with stakeholders.
• Being a positive lead when managing the team.
• Experience presenting to broad audiences from technical to executive level.

   

WE VALUE

• Experience managing 24x7x365 operations across global enterprise environments.
• Master’s in computer science or Engineering with an emphasis in Information Security or a related field is a plus.
• Considerable expertise or experience in at least one of following security domains (Threat Modeling, SAST, DAST, Authentication & Public Key Infrastructure (PKI), Vulnerability Management, Data Security or Cryptography)
• Technical certifications such as: CISSP, CSSLP
• Understanding/Knowledge of global frameworks and standards like NIST, BSIMM, FIPS,