Cyber Security Analyst- In Office

Reports to: Americas Cybersecurity Manager

Salary: $60,000.00

Location: Grapevine, TX.

This is not a remote working position, applicants must reside in the Dallas-Fort Worth area and must have US Citizenship for this job role        

Overview

Join Menzies Aviation’s Global Cyber Security Team. Menzies Aviation is an independent, time-critical logistics specialist serving the airline industry. At more than 300 locations in 65 countries. 

Working as part of a global team, based in UK, Kuwait and the US you will be responsible for supporting fueling operations across Canada, USA and Mexico to comply with security programs like NIST CSF or TSA pipeline cybersecurity requirements.

This position requires the applicant to be a US Citizen, therefore please only apply if you are. Location DFW, not a remote working position.

Ideally the applicant will have experience of managing Cyber Security controls against a recognized framework and a broad understanding of the key processes and technologies required to implement robust cyber security controls.

Daily you will be working with the operational teams in the fuel farms, regional IT teams and the wider cyber team to understand and risk assess the security controls in place in the fuel farms, identifying the gaps against the security framework requirements and planning the remediation.

You will also be working with a third-party Vulnerability Management and Managed Detection and Response provider to ensure we have the correct coverage, processes and reporting in place and identifying opportunities for improvement.

Weekly, you will be involved in planning or delivering cybersecurity incident response tabletop-based awareness exercises designed to keep awareness of cyber threats high, developing and maintaining the correct behaviors.

Provide regular status reports to SVP Fuels, CISO and fueling operations stakeholders.

Maintain cybersecurity documentation meeting regulatory requirements and carry out assessments to against the documentation to verify compliance.

Monthly you will support the implementation of projects in the region, risk assessing projects and changes at the earliest opportunity to assist with the design and implementation of the relevant security controls.

Support, coaching and training can be provided to manage the technical elements of this role. What we really value is someone who is willing to step out of their comfort zone to learn and achieve, demonstrates and positive attitude and will tackle the challenges with energy.

Main accountabilities include:

• Ensuring the security architecture is implemented and functioning across the estate and providing the expected detection and prevention capabilities.
• Host/lead regular tabletop exercises to maintain awareness of cybersecurity incident response and update response plans.
• Analyze and prioritize cyber threat intelligence and disseminate actionable information to the relevant IT teams and system owners to proactively mitigate emerging vulnerabilities.
• Scoping and managing the annual mandatory external testing of cyber security controls on key production systems. Reporting the findings to the relevant stakeholders and managing the required mitigations.
• Update and maintain documentation for business units to meet cybersecurity regulations.
• Monitor, measure and advise on the cyber controls of third-party suppliers.
• Ensure the relevant training and communications materials, informed by current threat intelligence, are available to promote a ‘Cyber Aware’ culture within the business.
• Collaborate with other departments such as IT, Development, legal, and Human Resources to ensure that cybersecurity measures are understood and implemented.
• Keep abreast of regulations affecting cybersecurity (e.g., GDPR, CA CCPA) and ensure the company’s adherence to these and other relevant standards.
• Performing risk assessments for new systems, significant changes, current processes, projects, integrations and updating the risk register with findings and propose an appropriate remediation plan.
• Consult with IT and system owners to ensure that their cyber security requirements are factored into the evaluation, selection, installation, and configuration of hardware, applications, and software. Identifying areas for potential improvement.
• Management of cyber risk by working with business and IT stakeholders to understand processes, inform on current cyber risk and manage