Job Details

Email to Friend Save Back

Cyber Security Manager

HOUSTON-77001, TX, US
02/14/2020

-

Required Skills

SIEM technologies, MIS

Company

Infinity Consulting Solutions, Inc

Experience

5 to 8 Year(s)

Job Description

Role and Responsibilities

Responsible for developing and managing Information Systems cyber security across the organization including business units, remote locations and cloud environment.

Maintain an information security strategy (forward looking roadmap), aligning services / portfolio
components to the strategy

Interact with a broad cross-section of personnel to explain and enforce security measures

Monitor the threat landscape and make timely adjustments and/or recommendations to reduce risk

Implement cyber security best practices to be compliant with internal and external audits (e.g., PCI, SOX, ISO) and coordinate information security services activities to support the audit (i.e., defining, gathering artifacts, etc.)

Implement information security policies, strategies, procedures and configurations in order to ensure confidentiality, integrity and availability of organization's environment and data.

Cultivate trusted relationships with key stakeholders within IS and various business units; keep consistent and open dialogue to uncover issues, challenges, risks

Identify information security weaknesses and potential gaps in the current environment and work with business units and IS to bring information security operations up to standards

Develop and deliver security standards, best practices, architecture and systems to ensure information system security across the enterprise. Implements procedures and methods for auditing and addressing non-compliance to information security standards.

Migrates non-compliant environments to compliant environments. Evaluates the organization to ensure compliance with standards and relevance with industry security norms.

Participate and represent IT Security in Delivery/Operational meetings; conduct an information security operational review meeting with key stakeholders on topics including overall information security status and performance

Participate in the strategic design process to translate security and business requirements into technologies, processes and systems

Ensures that project/department milestones/goals are met adhering to approved budgets.

Evaluate new / emerging security products and technologies and make recommendations to the leadership in regards to the security impact and value to the organization

Manage and drive remediation efforts related to information security; remediation may be from incidents, penetration tests, vulnerability scans, internal/external audits and Critical Practice Assessments

Review service management reports to ensure tickets (i.e., incidents, problems, requests, changes) related to information security, are being acknowledged, worked and Service Level Agreements are met; provide direction on ticket remediation and ensure remediation is complete

Conduct an ongoing security awareness program for TIC personnel ensuring individuals understand and are compliant with the relevant information security obligations including security topics that provide guidance on security policies and supporting documentation and procedures

Qualifications and Education Requirements

Basic Requirements:

8+ year IT experience with most recent experience in Cyber Security portfolio.

5+ years of information security experience and/or IT risk management experience with a focus on security, performance, and reliability

Mandatory experience implementing ISO Security standards like ISO 27001.

Security/Consulting industry experience working in a customer facing role

Understanding of security protocols, cryptography, authentication, authorization, and security

Knowledge of multi-factor authentication, single sign-on, identity management or related technologies

Experience with network security technologies and architectures such as firewalls, IDS/IPS, DMZ architecture, Content filtering, etc.

Experience with SIEM technologies (i.e., architecture, logging, event correlation, incident response, etc.)

Experience with standards and regulations impacting information security and information security internal & external audits (i.e. SOX, PCI, ISO, GDPR etc.)

Undergraduate or graduate degree in Computer Science or MIS.

Preferred Skills

At least one of the following certifications: CISSP, CISM, SSCP, CEH, or CSSLP

Additional Notes