Position:
Full-Time / Part-Time Location:
Remote Start Date:
ASAP
Nationality:
Any
Windows Management Experts (WME) is looking for a Cybersecurity Manager role for one of our valued clients. The role of a Cybersecurity Manager will be crucial in ensuring the protection of our client’s digital assets and information. This role involves overseeing and managing the overall cybersecurity strategy, policies, and operations within the organization. Further, the Cybersecurity Manager will be responsible for assessing and mitigating potential risks, threats, and vulnerabilities that could compromise the confidentiality, integrity, and availability of data and systems.
Having a background in information security or computer science, the resource should have a deep understanding of the latest cyber threats and how to mitigate them. They should also have strong leadership and communication skills, as they need to be able to work effectively with both technical and non-technical teams.
That said, one of the key responsibilities of the selected Cybersecurity Manager will be to develop and implement robust security measures and controls to safeguard our client organization’s networks, systems, and data. This includes establishing and enforcing security policies and procedures, conducting regular risk assessments, and implementing appropriate security technologies and solutions.
Another important aspect of the role is managing incident response and handling security breaches or incidents effectively. The Cybersecurity Manager establishes incident response plans, coordinates incident investigations, and oversees remediation efforts to minimize the impact of security breaches.
Lastly, WME is looking for some exceptional communication and interpersonal skills in the new team member. The new Cybersecurity analyst should be able enough to provide a high-quality user experience to our clients. The candidate’s toolbox must be complete and diverse. From being technically savvy to displaying a vigorous passion for learning beyond their traditional areas of expertise, the resource must prove to be an asset to the company.
Required Skills/Qualifications/Education:
- A bachelor’s degree in information technology, Cybersecurity, or any other Computer Science field.
- Strong knowledge of cybersecurity frameworks like NIST Cybersecurity Framework, ISO 27001, or CIS Controls.
- Proficiency assessing and managing risks associated with cloud, Internet of Things (IoT), and artificial intelligence (AI).
- Strong understanding of evolving cyber threats and attack vectors, including ransomware, social engineering, and zero-day vulnerabilities.
- Experience in designing and implementing security controls for cloud environments, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).
- Familiarity with the latest trends in secure software development practices, such as DevSecOps, continuous integration/continuous deployment (CI/CD), and secure coding standards.
- Knowledge of advanced threat detection and prevention technologies, such as next-generation firewalls, intrusion prevention systems (IPS), and Security Information and Event Management (SIEM) solutions.
- Ability to conduct thorough vulnerability assessments and penetration testing to identify and address weaknesses in the organization’s networks, systems, and applications.
- Proficient in incident response and handling, including the ability to lead investigations, contain security incidents, and perform root cause analysis.
- Understanding of data privacy and protection regulations, such as GDPR and CCPA, and experience in implementing appropriate controls to ensure compliance.
- Familiarity with security compliance frameworks and standards, such as PCI DSS, HIPAA, or SOX, and ability to align security practices with regulatory requirements.
- Experience in managing and monitoring security systems and tools, such as antivirus software, intrusion detection/prevention systems (IDS/IPS), and endpoint protection platforms (EPP).
- Strong knowledge of network security protocols, including TCP/IP, VPN, DNS, and SSL/TLS, and ability to analyze network traffic for potential security incidents.
- Proficiency in security incident response tools and techniques, including log analysis, forensics, and malware analysis.
- Working experience in a 24×7 environment.
- Well-organized personality with great attention to minimalistic details.
- Excellent customer service skills.
- Excellent verbal and written communication skills.
Responsibilities of the Cybersecurity Manager:
- Develop & implement dependable cybersecurity strategies and policies to protect the client’s information systems and data assets.
- Establish & enforce access control mechanisms, including user authentication, authorization, and identity management.
- Conduct regular risk assessments and vulnerability scans to identify potential security challenges.
- Monitor security systems, logs, and alerts to detect and respond to potential security incidents.
- Lead incident response efforts during security breaches, coordinating with internal teams and external stakeholders to contain and mitigate the impact.
- Stay abreast of the latest cyber threats and emerging technologies to assess their potential impact on the organization’s security posture.
- Collaborate with IT and development teams to integrate security into the software development lifecycle, implementing secure coding practices and conducting code reviews.
- Manage security awareness and training programs to educate employees about cybersecurity best practices and promote a culture of security.
- Oversee the deployment and maintenance of security technologies, such as firewalls, intrusion detection/prevention systems, and data loss prevention solutions.
- Ensure compliance with relevant regulations.
- Conduct investigations and forensic analysis to determine the root cause of security incidents, identify gaps, and recommend remediation actions.
- Develop and maintain business continuity and disaster recovery plans.
- Engage with external vendors, partners, and third-party service providers to assess their security practices and ensure they meet the organization’s security requirements.
- Provide regular reports and updates to senior management, presenting the state of cybersecurity, ongoing initiatives, and recommended improvements.
Core Values:
- Integrity (Doing What’s Right)
- Inclusion (Encouraging Diversity)
- Teamwork (Working Together)
- Excellence (Being Your Best)
- Accountability (Taking Personal Responsibility)
Disclaimer
All the qualified applicants will receive due consideration for employment without any regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
