Information Security Systems Manager

Company Description

Ramboll is a global architecture, engineering, and consultancy company. As a foundation-owned people company, founded in Denmark, we believe that the purpose of sustainable change is to create a thriving world for both nature and people. So, that’s where we start – and how we work. Our history is rooted in a clear vision of how a responsible company should act and being open and curious is a cornerstone of our culture. Ramboll in the Americas has thousands of experts working across more than 70 offices. Ramboll experts deliver innovative solutions across Environment & Health, Water, Energy, and Planning & Urban Design.

Job Description

Reporting Globally. Based Geographically. This position is based in the USA, the location is negotiable.  East Coast location preferred.

USA citizenship is required for this role.   

Are you eager to develop your excellence in an inclusive, collaborative, and empowering community? Are you excited about joining a company that strives to make a difference – for its employees, clients, and society?   

If so, we invite you to bring your knowledge of Information Technology and Information Security into play as you help Ramboll globally develop its national information security obligations, working within an ISO27001 compliant framework. Reporting to the Global Business Partners - Information Security & Data Compliance Manager. The role will allow the successful candidate to develop their existing security knowledge working with the business and global enterprise Architects developing Information Security compliance for Ramboll. To succeed in this role, you must have a strong background in Information Technology and a willingness to develop your skills in Information Security. You must have a hands-on approach and be prepared to be involved in both the strategic direction of IT security as well as the setting of policies as well the technical and practical aspects of running compliance audits, investigations, and IT forensics.   

Your new role  

As our new Information Security Systems Manager, you will join our Global Business Partners - Information Security & Data Compliance Team, reporting to the CISO.  Limited international travel may be required.

You will be part of Global Business Team providing outstanding support to the national businesses. The National Information Management team has a strong can-do attitude and supports all its team members to deliver sustainable solutions on behalf of Ramboll. Working in Ramboll’s CISO department provides the opportunity to be involved in exciting, cutting-edge projects and to engage with all aspects of the business both in country and globally.  

Your key tasks and responsibilities will be: 

Immediate Responsibilities: 

• Ensure the CMMC Level 2 certification for an existing Level I Enclave, including an external audit 
• Interface with contractors / consultants to support CMMC level 2 certification 
• Maintain enclave operation and governance 
• Participate in the development of an Americas based disaster recovery plan and simulations 
• Oversee the completion of client surveys regarding Ramboll cyber security 
• Participate in a team to establish an Americas data residency policy based on client contractual terms  
• Interface with Project teams to develop procedures to meet client cyber security requirements 

Overall Responsibilities: 

• Support the planning, researching, and developing of security policies, standards, and procedures  
• Support the development of and maintain a security process’s that enables the business to develop and implement security solutions and capabilities that are clearly aligned with business, technology and threat drivers  
• Participate in designing secure networks, spaces, systems, and application architectures  
• Support the development of and run processes for disaster recovery, human risk, computer forensics, compliance audits and information risk management  
• Work closely with Enterprise Architects and Solutions Architects to ensure constant focus on Information Security issues  
• Conduct security assessments of internal systems, spaces, applications, and IT infrastructure as part of the overall risk management practice  
• Perform audits, facilitate external audits, and determine whether we need to alter our procedures to comply with national regulations and support the external audit process for national legislative and regulatory compliance. Including such things as NIST SP 800-171, DFARS, CMMC, and ITAR others as denoted by jurisdiction. 
• Participate in meetings with managers at all levels of the organization to ensure data privacy by design