Technical Manager - Cyber Risk Management

SEI CERT Cyber Risk and Resilience Directorate enables organizations to achieve operational resilience by performing research in emerging areas of operational risk, producing measurement and assessment tools, and developing and validating models, frameworks, and tools to drive quantifiable risk reduction. The Cyber Risk Management team focuses on designing, prototyping, and transitioning novel risk management methods to support partners in government and industry.

About the role

The individual in this position will work as a technical manager of the Cyber Risk Management (CRM) Team within CERT’s Cyber Risk & Resilience Directorate. Responsibilities include creating, developing, and managing a sustained applied research and technical agenda for the CRM Team, aligned with the US Department of War’s strategic challenges and emerging threats. The role involves developing and communicating technical vision, creating project work statements, managing project plans and initiative finances, generating new work and customers, collaborating with business development staff, ensuring high customer satisfaction, and supervising staff.

Responsibilities

• Develop and manage a technical agenda for applied research in risk and resilience.
• Create and communicate technical vision for the CRM Team.
• Develop tasking, project work statements, and project plans.
• Manage initiative finances and accounting.
• Generate new work and customers in collaboration with business development staff.
• Execute work with a high degree of customer satisfaction.
• Supervise and manage staff performance.
• Prepare and deliver presentations for technical and non-technical audiences.
• Develop strategic plans, products, and transition (go-to-market) strategies.
• Interact effectively with diverse constituencies, including senior executives and managers in government and industry.
• Handle confidential and sensitive information appropriately; obtain and maintain a security clearance as required.

Requirements

• BS in risk management, cybersecurity, information systems, economics, mathematics, or a related technical field; advanced degree strongly preferred. Other technical backgrounds with significant relevant experience may be considered.
• Ten (10) years of experience as an enterprise risk executive, enterprise risk manager, primary investigator in risk management research, or similar technical occupation.
• Experience and expert knowledge of:
  • Risk quantification tools and techniques.
  • Risk management frameworks, models, and standards of practice.
  • Risk governance.
  • Network architectures and telecommunications.
  • Cybersecurity and operational resilience.
  • Information security models, frameworks, and metrics.
  • Foundational artificial intelligence concepts and techniques.
  • Project planning and financial management.
  • Strategic planning and product development.
  • US Government (USG) and Department of War (DOW) risk tools, techniques, and methods.
  • USG and DOW risk management strategies, policies, and directives.

Skills

• Mastery of risk management concepts, cybersecurity best practices, and standards.
• Excellent analytical, organizational, reasoning, and problem-solving skills.
• Outstanding written and oral communication skills.
• Demonstrated ability in employee performance management.
• Strong financial and resource management skills.
• Ability to develop strategic plans and technical agendas.
• Experience in developing products and transitioning them to market.
• Active involvement in professional societies.

Preferred Qualifications

• RIMS-Certified Risk Management Professional.
• Certified Enterprise Risk Manager.
• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Certified Information Systems Auditor (CISA).

You will be subject to a background investigation and must have the ability to obtain and maintain a Department of War security clearance.

Benefits

• Comprehensive medical, prescription, dental, and vision insurance.
• Generous retirement savings program with employer contributions.
• Ample paid time off and observed holidays.
• Life and accidental death and disability insurance.
• Free Pittsburgh Regional Transit bus pass.
• Access to Family Concierge Team for childcare navigation.
• Fitness center access.
• Tuition benefits.

Pay

Salary basis.

Schedule

Full time.

Location: Pittsburgh, PA