Cybersecurity Manager

Job Summary 

As a member of the IT team, reporting to the Director of Quality & Business, the Senior Analyst, Cybersecurity and IT Compliance is accountable and responsible for IT and OT cybersecurity posture, and alignment with cybersecurity program, policies and standards. In addition, the role is also responsible to manage and ensure compliance with IT policies, IT standards and applicable regulations like SOX.  

As part of this role, manage external partners and coordinate with internal resources available to monitor and proactively responds to any cyber threat which materialized or might materialize at any company asset to prevent or minimize potential business, financial, or reputational impact. The Senior Analyst is also responsible for producing analysis reports, executing/coordinating audit findings, and communicating with Risk management leaders. 

More specifically, the Senior Analyst, Cybersecurity and Compliance will:  
 

Essential Duties and Responsibilities: 

• Evaluate and recommend approaches to maintain a strong cybersecurity resilience with best usage of available resources. 

• Manage and coordinate work of external partners to deliver cybersecurity related responsibilities. 

• Conduct security assessments and make recommendation for Disaster Recovery (DR), remote access, network appliance, Server, application and Endpoints. 

• Support the business in planning and implementing cybersecurity initiatives 

• Support the implementation of all cybersecurity technology solutions including endpoint, network security, vulnerability management, SIEM and others Monitor and manage the implementation of security patches (servers, workstations and network environments) and, EDR and anti-virus systems. 

• Lead and monitor user awareness training, tracking of training and phishing program. 

• Coordinate analysis of security incidents, propose changes based on lessons learned. 

• Security prevention planning and maintain risk registry, ensuring remediations are aligned Corporate acceptable cyber risk policy. 

• Staying up to-date with industry cybersecurity issues and maintaining necessary information technology security documents. 

• Evaluate and support compliance with Privacy and SOX requirements. 

• Assist in facilitating internal and external IT audits and assessments. 

QUALIFICATIONS: 

• Bachelor’s degree in engineering, information technology or related field. 

• CISSP, CISM, CISA or other relevant security related designations. 

• 3-5+ years of experience in cybersecurity and risk management. 

• Experience in the delivery of cyber security governance activities. 

• Knowledge of cyber security principles and best practices related to IT as well as industrial control and OT environments. 

• Knowledge of privacy and SOX compliance. 

• Demonstrated capability to make decisions and to gain cooperation of others. 

• Ability to coordinate multiple tasks, manage expectations and meet tight deadline. 

PHYSICAL DEMANDS: 

 
Conducts work in both a field-type environment and in a professional office setting with local travel to jobsites to conduct inspections. 
Physical working conditions may involve the following: 

• Lifting up-to 20 pounds. 

• Extended periods of sitting, walking, standing, reaching, and/or bending. 

• Extended periods of reading fine print on a computer or in paper-based format. 

NON-PHYSICAL DEMANDS: 

 
Routine aspects of this position may require the following non-physical demands: 

• Analytical and logical reasoning. 

• Problem solving and researching skills. 

• Time management and organizational skills. Self-driven and able to work independently with guidance.  

• Communication skill within office and remote co-workers  

• Full time in-office  

• Professional decorum in a diverse, inclusive environment working environment. 

POTENTIAL HAZARDS: 

 
Routine aspects of this position may place the incumbent in situations where they may be susceptible to potential hazards from the following: 

• Trips, slips and/or falls while on customer property. 

• Chemical abrasives are used in office and kitchen cleaning. 

• Lifting items up to 20 pounds in weight. 

• Other hazardous conditions on customer premises, not otherwise defined here. 

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.