Sr. Cybersecurity Manager

General Summary

This position is responsible for managing the Company’s cybersecurity program, leading the security operations and reporting functions, identifying cybersecurity risks within the enterprise and developing and prioritizing initiatives to mitigate and/or eliminate those risks.

Essential Job Accountabilities

1. Lead the Information Technology (IT) organization in developing a comprehensive profile for cybersecurity risk within the enterprise to ensure the Company’s IT infrastructure is secured.

1. Identify cybersecurity frameworks and publish standards to drive cybersecurity compliance.

1. Align cybersecurity program with regulatory and industry compliance requirements and best practices, such as FARS/DFARS, NIST 800-171, CMMC, FedRAMP, and CCPA.

1. Partner with the IT Delivery and Infrastructure organizations to develop comprehensive best practices and procedures to ensure optimum cybersecurity safety.

1. Partner with the IT Delivery and Infrastructure organizations to prioritize work effecting risk mitigations.

1. Develop and manage the Incident Response procedure for cyber incidents to ensure effective and rapid response plans are in place.

1. Develop communication for IT Steering, leadership, and the Board of Directors to gain sponsorship for the Company’s cybersecurity strategy and demonstrate the cybersecurity program’s effectiveness.

1. Develop and socialize the cybersecurity roadmap across the enterprise to drive awareness and sponsorship for cybersecurity-based initiatives.

1. Conduct the cybersecurity awareness program to ensure Granite IT and the business is apprised of and trained to recognize cyber threats.

1. Manage the security operations function to analyze and mitigate cyber risk: detecting and reporting vulnerabilities and, when necessary, investigating cyber threats and intrusions.

1. Develop and maintain a program to validate the cybersecurity capabilities of 3rd party software and services so that Client''s partners are appropriately vetted for cybersecurity maturity.

1. Manage the cybersecurity budget to meet the needs of the cybersecurity program, advocating for and allocating resources to address cyber threats.

Education

• Bachelor’s degree in Computer Science, Information Systems, or related field of study, required

Work Experience

• 10+ years progressive cybersecurity management experience
• 15+ years of practical cybersecurity experience

Knowledge, Skills, and Abilities

• Certified in a cybersecurity or information security discipline, such as CISSP or CISM
• Must have experience managing the cybersecurity and security operations functions
• Must have excellent knowledge of the cybersecurity threat landscape
• Must have an excellent knowledge of IT systems and tools and keep up to date with new developments in the IT industry   
• Must have an excellent knowledge of cybersecurity solutions and services in the market
• Must have excellent knowledge of cybersecurity frameworks
• Must have experience developing a cybersecurity roadmap and budget forecast
• Must be adept at persuasive reasoning
• Must have strong customer service skills  
• Must have strong verbal and written communication skills 
• Must be comfortable working in changing, evolving environments and with influencing and motivating without authority  
• Must possess excellent problem-solving skills