Senior Manager Cyber Security & Risk Compliance

上海展浪信息技术有限公司; Cleveland (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

上海展浪信息技术有限公司 seeks a Senior Manager Cyber Security & Risk Compliance to lead security objectives across services and coordinate with internal stakeholders and external customers. You will design and implement risk controls, run vulnerability assessments, and guide architecture, configuration, and testing of data networks for client engagements.

Ideal candidates have 5+ years in security design and hands-on experience with logs, networks, and vulnerability tools, plus certifications such as

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or equivalent education or work experience.
• 5-7 years of Security Solutions design, configuration, implementation, troubleshooting and POC experience.
• 5+ years of troubleshooting WAN/LAN/WLAN infrastructure issues including: T1, T1 Multilink, Ethernet Hand-off, MPLS, BGP, OSPF, EIGRP, VPN, Wireless, etc.
• Security Certifications – CISSP, CISM, CISA.
• Proven work experience as a Cyber Security Specialist or similar role.
• Hands-on experience analyzing high volumes of logs, network data and other attack artifacts.
• Experience with vulnerability scanning solutions.
• Proficiency with antivirus and security software.

Responsibilities

• Protecting systems by defining access privileges, control structures and resources.
• Implementing security improvements.
• Determine security violations and inefficiencies by conducting periodic audits.
• Implement and maintain security controls.
• Identify and solve potential and actual security problems.
• Assess the current situation, evaluating trends and anticipating security requirements.
• Keep users informed by preparing performance reports; communicating system status.
• Maintain quality service by following organization standards.
• Maintain technical knowledge by attending educational workshops.
• Contribute to team effort by accomplishing related results as needed.
• Create new network and security solutions configurations and configuration documentation including information gathering.
• Make recommendations in regards to architecture and infrastructure planning to customers to refine and enhance the customer’s existing network environment.
• Participate in and/or lead network and security project of medium to high complexity.
• Create detailed implementation plans.
• Required to work evenings and weekends when requested.

Job description

We are looking for aSenior Manager Cyber Security & Risk Compliance to join our team to work closely with the internal stakeholders and external customers to ensure that our services and projects meet security objectives and regulations across our organization. They are responsible for various tasks, including process re-engineering and documentation of activities related to this area. Responsibilities include using their skills to detect insecure features and malicious activities within our networks and infrastructure. They will implement customized application security assessments for client-based asset risk, corporate policy compliance as well as conduct vulnerability assessment. They should have an advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.
Focus is not only limited to assessing whether vulnerabilities exist but also how those risks could be mitigated which can help provide organizations with more confidence about system stability going forward. Ultimately, you will work to ensure the security of our business information, employee data and client information throughout our entire network. Candidate will be responsible for architecture, design, configuration, implementation, and testing of the data networks and security solutions for Acuative clients.

Essential Functions :

• Protecting systems by defining access privileges, control structures and resources.
• Implementing security improvements.
• Determine security violations and inefficiencies by conducting periodic audits.
• Implement and maintain security controls.
• Identify and solve potential and actual security problems.
• Assess the current situation, evaluating trends and anticipating security requirements.
• Keep users informed by preparing performance reports; communicating system status.
• Maintain quality service by following organization standards.
• Maintain technical knowledge by attending educational workshops.
• Contribute to team effort by accomplishing related results as needed.
• Create new network and security solutions configurations and configuration documentation including information gathering.
• Make recommendations in regards to architecture and infrastructure planning to customers to refine and enhance the customer’s existing network environment.
• Participate in and/or lead network and security project of medium to high complexity.
• Create detailed implementation plans.
• Required to work evenings and weekends when requested.
• May act on customer’s behalf in customer/vendor meetings, keeping the customer’s best interest in mind.
• Escalate and work with equipment manufacturer’s technical support teams to resolve complex issues when needed.
• Be able to effectively communicate with peers and all levels of management within the organization both written and verbally.
• Excellent note taking skills.
• Work with external auditors to gather and respond to requests.
• Provide response to customer request for information.

Position Type/Expected Hours of Work/Travel.

• Required to work evenings and weekends when requested.
• Travel maybe required to customer or other corporate locations.

Qualifications required :

• Proven work experience as a Cyber Security Specialist or similar role.
• Hands-on experience analyzing high volumes of logs, network data and other attack artifacts.
• Experience with vulnerability scanning solutions.
• Proficiency with antivirus and security software.
• Bachelor’s degree in Computer Science, Information Systems, or equivalent education or work experience.
• 5 - 7 years of Security Solutions design, configuration, implementation, troubleshooting and POC experience.
• 5+ years of troubleshooting WAN/LAN/WLAN infrastructure issues including: T1, T1 Multilink, Ethernet Hand-off, MPLS, BGP, OSPF, EIGRP, VPN, Wireless, etc.
• Customer focused.
• Ability to multi-task.
• Work with minimal supervision.
• Ability to create detailed network and security design documentation.
• Security Certifications – CISSP, CISM, CISA.

Additional Qualifications Desired :

• Cisco knowledge and certifications.
• Knowledge of ITIL Incident, Problem and Change Management process.

Work Environment/Physical Demands.

• Sitting at desk.
• Climbing: Ascending or descending stairs and the like, using feet and legs and/or hands and arms.
• Light work: Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force frequently, and/or a negligible amount of force constantly to move objects.
• The worker is required to have close visual acuity to perform an activity such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal; analyzing data based upon color and distinguishing incident priorities based upon color differences.