Job Description:

The Cyber Security Manager position is responsible for defending the Client infrastructure from global cyber threats. This role includes advanced analysis, threat hunting, developing and improving the quality of detection and response, and leveraging an evolving array of technologies to proactively identify and eliminate threats across our global footprint.

Responsibilities also include translating industry, government, contractual, and internal compliance requirements into IT Security and Risk Management frameworks, policies, standards, and best practices. This role will provide support for the cyber security program across all of clients line of business and support internal and external audits.

MAJOR RESPONSIBILITIES

Technical Services

• Incident Reporting, manages, track and report incidents to include submitting incident reports using the SharePoint Incident Reporting Portal
• Uses SIEM Sentinel for event tracking and correlation
• Manages CrowdStrike systems and assists partner to maintain and enforce latest Crowdstrike agents on all devices
• Manages NextPointe on setting security policies and standards on firewalls, Routers, switches, intrusion detection systems, and software deployment tools
• Evaluate firewall change requests and assess organizational risk
• Safeguards network against unauthorized infiltration, modification, destruction or disclosure
• Researches, evaluates, tests, recommends, communicates and implements new security software or dev forensics; manages, performs and reports forensics analysis to leadership
• Monitor and analyze Network IDS to identify security issues for remediation
• Manages, performs and monitors the Barracuda email security and phishing systems and employee Cyber security training programs
• Supports identifying and analyzing emerging and advanced threats.
• Supports working across teams and third-party vendors to resolve security issues.
• Ability to explain technical security issues confidently and simply without hype or buzzwords.
• You will be responsible for providing subject matter expertise over multiple security functions.
• Act as Incident Response lead for major security incidents.
• Manage security escalations and incidents in partnership with various functional areas.
• Perform deep-dive analysis of forensic artifacts.
• Maintains and installs Camera Surveillance systems across all client line of businesses. Adheres to standards on naming and architecture.
• Provides escalation on all Camera Surveillance systems related issues or requests.
• Maintains and manages door access systems across all client line of businesses
• Develop and manage security policy through tuning and automation.
• Provide input and assist with security design, architecture, and engineering initiatives.
• Mentor and guide junior CSIRT analysts to grow their incident response analysis skills.
• Evaluates new emerging hardware and software technologies, recommends cost-effective technology solutions based on evaluation and test results
• Prepares purchase orders to approved asset acquisitions such as computing equipment and related services
• Negotiates contract terms and pricing with vendors and other technology suppliers
• Maintains on-going inventories of corporate computing assets such as hardware and software products and licenses
• Ensures that all requests for support are responded to in a reasonable time and executed accurately by staff, making changes to process and procedures as required to ensure the appropriate support is provided.
• Makes routine and non-routine decisions within the scope of the job on day-to-day technical infrastructure support, as well as purchasing of technology products and services in adherence with departmental budgets, referring major issues to the CIO
• Provides internal customer service throughout the company maintaining a close customer business relationship and creating an environment in which staff receives information and automation necessary to maximize productivity on a short and long-term basis.
• Provides service and support 24/7/365 as required, during exceptional circumstances, to maintain systems and service availability. This includes monitoring and responding to after-hours alerts sent though mobile devices, as well as responding to phone calls for support as situations require.
• Verify and document security controls in order for the systems to be certified and accredited.
• Assist in the development and maintenance of system security plans and contingency plans for all systems within scope.
• Participate in the risk assessment to periodically re-evaluate sensitivity of the system, risks, and mitigation strategies.
• Supports research and analysis on the impacts on system modifications, technological advances, and malicious code.

Project Management

• Prepares, plans, and co-ordinates new technology implementation and existing technology upgrades for short and long-term projects.
• Conducts periodic reviews on on-going projects and rollouts.
• Provides direct Expert level technical support for major technology implementations.

Administration

• Prepares regular status reports and discusses ongoing issues
• Reviews and approves expense reports on time
• Travel as required with minimum notice.

Management

• Manage external resources as needed on all projects ensuring that tasks and projects are completed on time and within budget

Finance

• Participates in preparation of the annual departmental budget, approves expenditures and monitors progress throughout the year, reviews and revises as appropriate.

Experience

• Relevant industry certifications preferred (i.e.: CISSP, GIAC or similar designations)
• OWASP and MITRE framework familiarity
• Security Architecture and engineering experience
• 5 to 8 Years of working experience as a Security Analyst of a Windows environment
• Demonstrated ability to prioritize team activities considering overall business direction while setting realistic and achievable goals
• Demonstrated ability to manage multiple projects and timelines using a project management approach
• Excellent teamwork, cooperation and time management skills
• Demonstrated ability to seek out relevant information and think analytically
• Demonstrated ability to listen, understand and respond in an effective and timely manner.
• Seasoned, in-depth knowledge of technological concepts, ITIL best practices and procedures
• Knowledge of writing specifications, designs and standards for selection and implementation of technologies
• Specialized, technical and professional knowledge of networking technology (i.e. TCP/IP, routing, etc.), computer operating systems, hardware architectures, Database design, System and Storage virtualization and project management fundamentals
• Excellent communication skills to deal effectively with all levels of staff within the company.