Senior Manager, Cyber Security Control Center

About the role

As a Senior Manager, Cyber Security Control Center you will be responsible for managing the tools and services along with overseeing security events, incidents and vulnerability for our client's security environment.

What You'll Do

• Manage the deployment, ongoing tuning, configuration, and operation of managed detection and response (MDR) tools and services, endpoint detection solutions, software logging and scanning tools, and other cybersecurity solutions to ensure cybersecurity health
• Oversee the assessment and remediation of all security events, incidents, and vulnerabilities identified by the security operations team
• Collaborate with IT teams and business stakeholders to establish expectations, develop security strategies, build consensus on remediation plans, and facilitate implementation
• Create, refine, test, and enforce cybersecurity policies and procedures to identify security gaps and remediation actions
• Develop and maintain disaster recovery plans and coordinate organizational readiness for disruptive events and business continuity
• Implement cybersecurity awareness and training programs that educate employees on recognizing, responding to, and reporting cybersecurity threats
• Monitor emerging cybersecurity threats, vulnerabilities, industry best practices, and regulatory requirements to ensure compliance and continuous improvement
• Provide expertise and guidance on security data analysis methodologies and collaborate with cross-functional teams to enhance detection and response capabilities
• Recommend strategies to reduce security risks across cloud environments, on-premises infrastructure, servers, network devices, and endpoint systems
• Review, update, communicate, and execute incident response plans while coordinating exercises and ensuring stakeholders understand their responsibilities

Required

• Bachelor's degree in Information Technology, Engineering, Management Information Systems, or a related field or four years of equivalent experience in IT networking or cybersecurity in lieu of a degree
• Eight years of experience in IT networking or cybersecurity including six years of experience as a security analyst, network engineer, or systems engineer
• Two years of cybersecurity operations team leadership experience
• Considerable knowledge of security event monitoring, analysis, triage, vulnerability scanning, asset management, and MDR/SIEM tools and processes
• Considerable knowledge of PCs, servers, firewalls, TCP/IP, network administration tools, intrusion detection systems, anti-virus software, Active Directory, data encryption, and security best practices
• Knowledge of cybersecurity frameworks and methodologies including NIST 800-53, ISO 27001, MITRE ATT&CK, and CIS Controls
• Strong problem-solving skills with the ability to balance business requirements and cybersecurity risk
• Strong program and project management skills
• Strong verbal and written communication skills with the ability to engage effectively with vendors and stakeholders at all organizational levels
• Strong organizational, analytical, and critical thinking skills to evaluate cybersecurity controls and recommend improvements
• Ability to build and lead high-performing teams through clear direction, accountability, and results-driven leadership
• Ability to evaluate cybersecurity control effectiveness, recommend security improvements, build consensus, and facilitate execution
• Ability to prioritize and execute tasks in a high-pressure environment while balancing risk and business needs
• Ability to collaborate effectively with IT teams, business users, and external partners to deliver secure technology solutions

Preferred

• CISM
• CISSP
• CompTIA Security+

Pay

$150,000 - $160,000 per year. Exact compensation may vary based on several factors, including location, experience, and education.

Benefits

• Medical, dental, and vision insurance
• 401k retirement account access
• Paid time off
• Paid sick leave and/or other paid time off as provided by applicable law