Cybersecurity Risk and Operations Manager

Cybersecurity Risk And Operations ManagerThe Cybersecurity Risk and Operations Manager collaborates with the CISO in creating and reviewing strategic plans for the continuous development of Logicalis's Cybersecurity program. As a skilled cybersecurity leader, they are responsible for guiding the operations of the Cybersecurity program. This includes developing, executing, auditing, and maintaining security controls, defenses, and countermeasures to intercept and prevent attempts to infiltrate company data.Essential Duties and ResponsibilitiesSecurity Leadership* Establishes operational objectives and work plans to determine expectations for goal attainment.* Works closely with business leaders, performing due diligence, to ensure security controls are in place.* Acts as the Project Manager for Cyber Remediation Workgroup. Ensuring KPI's are tracked and key target dates are met.* Fosters a culture of Security by Design across business teams and peers.Risk & Audit* Leads and prepares for annual audits - SSAE21, ISO 27001, and CMMC.* Lead efforts of our third-party compliance team. Reviewing control gaps and POAM activities, ensuring quarterly control reviews are completed, and third party vendor assessments.* Responsible for reporting operational Cybersecurity risk and vulnerability metrics to the CISO.* Works closely with business leaders, performing due diligence, to ensure security controls are in place.* Continuously reviews industry-related security and regulatory topics.* Assists with customer security concerns, questionnaire requests, security addendums, and facilitates customer meetings.* Suggests appropriate Cybersecurity awareness and training resources.* Suggests and develops improvements to policies and standards.* Assists with customer questionnaire requests, security addendums, and facilitates customer meetings.Security Operations* Performs security architecture reviews for Cloud (Azure), SaaS, API's, hybrid, and/or on-premise deployments.* Reports performance metrics for security operations.* Leads the incident management program.* Leads the vulnerability management program.* Manages the Security information and event management (SIEM) managed service relationship.General* Demonstrates and actively promotes an understanding and commitment to the mission of Logicalis through performing behaviors consistent with the organization's values.* Maintains a working knowledge of applicable Federal, State, and Local laws and regulations as well as policies and procedures of Logicalis in order to ensure adherence in a manner that reflects honest, ethical and professional behaviors.* Supports and conducts self in a manner consistent with customer service expectations.This job has no supervisory responsibilities.QualificationsTo perform this job successfully, an individual should be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.Education/Experience/Technical Requirements/Certifications Equivalent combination accepted.Education* Bachelor's or Master's degree in Computer Science or related fieldExperience / Technical Requirements* 8+ years of professional experience in cybersecurity or security auditing.* 2+ years of management experience in a technology field.* Experience with performing third party and internal control assessments.* Knowledge of security control frameworks such as NIST CSF, ISO 27001, NIST 800-171.* Knowledge of and experience of cyber threats, penetration testing, and vulnerability assessments.* Basic understanding of security standards and regulatory requirements such as SSAE21, HIPAA, CMMC, and CJIS.* Experience working with Managed Service Providers (MSPs).Other Skills and Abilities* Able to lead a cooperative effort among members of a team and across departments.