Security Practice Management Team Lead (Promotion)

Reports to: Cybersecurity Department

 Direct Report: Dedicated vCSOs and other direct security compliance officers.

 Indirect Report: All Security Officers taking a vCSO role for a client. All security officer directives around client compliance (risk assessments, attestations, gap analysis etc.) and those running security projects.

Job Description: 

The Security Practice Management Team Lead would work to manage active security practice management engagements, projects and efforts. The role requires project management, organizational, and leadership skills along with subject matter expertise.

Job Responsibilities:

1. SPM Team Management:

• Manage Security Practice Management (vCSO/Verify etc) engagements by assigning roles, delegating tasks, setting deadlines, and monitoring the profitability and efficiency of engagements.
• Help to establish and then lead a team of vCSOs, providing guidance and support in executing governance, risk, and compliance initiatives, fostering a culture of continuous improvement and knowledge sharing.
• Delegate tasks and responsibilities effectively, ensuring efficient workload distribution and optimal resource utilization to meet client needs and organizational objectives.

1. Security Project and Engagement Management:

• Streamline engagement processes by maintaining and updating scalable templates and processes to enhance service delivery.
• Serve as the main point of contact for clients' cybersecurity concerns by building strong relationships, understanding their unique requirements, addressing their needs with tailored strategies, and providing regular updates and reports on the status of cybersecurity initiatives, including performance metrics, findings, and recommendations for improvement.

1. Security Project Engineer:

• Conduct comprehensive risk assessments to identify potential threats and vulnerabilities, develop and implement mitigation strategies to enhance clients' security postures, and monitor compliance with regulatory requirements and industry standards, recommending remediation actions to address any gaps or deficiencies.

1. Other Responsibilities:

• Perform general Security Officer duties, such as running security huddles, assisting with SOC shifts and IR needs, ensuring tool functionality, and assisting with cyber insurance attestations and oversight. All Cybersecurity department team leads are key leaders in the Cybersecurity department crucial to the growth of the department not just to their specific sub department.
• Stay informed about emerging threats, vulnerabilities, and regulatory changes, assessing their potential impact on clients and adjusting strategies accordingly.
• Oversee data collection efforts to verify compliance and gather critical security information within client infrastructures, ensuring accuracy and reliability.
• Assist with incident response (IR) activities, including participating in the on-call incident escalation rotation, supporting SOC coordinators, communicating with key stakeholders during incidents, developing and revising playbooks, implementing proactive remediations, and conducting postmortems with clients.

Skill Requirements:

1. Technical Skills:

A. Cybersecurity Knowledge

• • Knowledge of cybersecurity principles, and practices including experience with compliance standards and regulations such as ISO 27001, SOC 2, HIPAA, and GDPR.
  • Proficiency in incident response and threat mitigation strategies.

B. Risk Management

• • Ability to conduct comprehensive risk assessments.
  • Knowledge of mitigation strategies and security controls.

C. Technical Tools

• • Familiarity with cybersecurity tools and technologies (e.g., SIEM, IDS/IPS, firewalls).
  • Proficiency in data collection and analysis tools for monitoring compliance and security performance.

2. Project Management Skills:

A. Project Coordination:

• • Ability to manage multiple projects and engagements simultaneously.
  • Proficiency in project management software and methodologies.

B. Scheduling and Budgeting:

• • Strong skills in managing project schedules, budgets, and resource allocation.
  • Experience in forecasting and budget variance analysis.

C. Process Improvement:

• • Ability to streamline and enhance engagement processes through scalable templates and procedures.

3. Int