SrMgr-Global Information Security - Security Risk Management

 JOB SUMMARY

The Senior Manager is responsible for leading and coordinating, articulating, and tracking actions related to developing and driving the implementation of cyber security risk management plans, ensuring effective cyber security risk management practices, and engaging with business unit members on a wide range of cyber security matters to achieve overall business objectives.  The position plays a critical role in helping to ensure that the company’s risk-taking entities are aware of the risks inherent in their activities and decisions, the impact of their actions on the company at an enterprise level, and opportunities to reduce, mitigate, or avoid risks altogether.

CANDIDATE PROFILE

Education and Experience

Required:
•   Bachelor’s degree in Cybersecurity, Computer Sciences or related field or equivalent experience/certification
•   7+ years of progressive information technology or information security experience including: 
•   3+ years of managing, consulting or working in the field of information security risk management
•   2+ years’ experience implementing, managing or governing security technologies, including encryption, network security, intrusion detection and digital forensics

Preferred:
•   Current information security certification, including Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP)1+ year experience in using the Factor Analysis of Information Risk (FAIR) Model
•   Technical leadership experience in a sourced environment
•   Project management skills with a demonstrated ability to work independently and with others
•   Ability to manage the details and compliance with standards and expectations
•   Technical infrastructure operations, administration, or engineering background
•   Experience with NIST frameworks, including conducting security assessments, implementing controls, and ensuring compliance with standards
•   Proficiency in utilizing ServiceNow, with an emphasis on navigating and leveraging the platform to enhance operational efficiency
•   Expertise in identifying critical security vulnerabilities during risk assessments and assessing the efficacy of remediations addressing identified issues.

CORE WORK ACTIVITIES

Security Compliance & Risk Management
•   Conduct assessments of threats and vulnerabilities, determine deviations from acceptable configurations or enterprise or local policy, assesses the level of risk, and develop and/or recommend appropriate mitigation countermeasures.
•   Draft risk assessments and reports for senior management and other stakeholders.
•   Stay current on emerging cyber and technology threats and potential implications.
•   Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives.
•   Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.
•   Be willing and able to adapt to a rapidly changing organization
•   Provide strategic leadership and senior management for the organization’s Cybersecurity risk oversight initiatives
•   Provide subject matter expertise in cybersecurity, to include maintaining and sharing knowledge of current and emerging cyber risk management practices and tools.
•   Advocate policy changes and makes a case on behalf of the company via a wide range of written and oral work products.
•   Manage and measures information security implications within the organization, specific program, or other area of responsibility, to include strategic, personnel, infrastructure, policy enforcement, emergency planning, risk management, security awareness, and other resources.

Maintaining Goals
•   Submits reports in a timely manner, ensuring delivery deadlines are met.
•   Promotes the documenting of project progress accurately.
•   Provides input and assistance to other teams regarding projects.

Managing Work, Projects, and Policies
•   Manages and implements work and projects as assigned.
•   Generates and provides accurate and timely results in the form of reports, presentations, etc.
•   Analyzes information and evaluates results to choose the best solution and solve problems.
•   Provides timely, accurate, and detailed status reports as requested.

Demonstrating and Applying Discipline Knowledge
•   Provides technical expertise and support to persons inside and outside of the department.
•   Demonstrates knowledge of job-relevant issues, products, systems, and processes.
•   Demonstrates knowledge of function-specific procedures.
•   Keeps up-to-date technically and applies new knowledge to job.
•   Uses computers and computer systems (includi