CyberSecurity Lead

Responsibilites:

• Create and maintain the enterprise’s security documents (policies, processes, standards, baselines, guidelines, and procedures).
• Perform security assessments, identify gaps in existing security architecture, and recommend changes or improvements.
• Carry out risk assessments of the overall security risk and for new technologies and projects.
• Review security requirements and controls for protecting information, systems, and technology assets.
• Create and maintain the enterprise’s security documents (policies, processes, standards, baselines, guidelines, and procedures).
• Perform security assessments, identify gaps in existing security architecture, and recommend changes or improvements.
• Carry out risk assessments of the overall security risk and for new technologies and projects.
• Review security requirements and controls for protecting information, systems, and technology assets.
• Supervise all investigations of security incidents and provide on-going communication with senior management.
• Supervise the design and execution of vulnerability assessments, penetration tests and security audits.
• Manage regular security awareness training for all employees to ensure consistently high levels of compliance with enterprise security documents.

Requirements: 

• Extensive experience in enterprise security architecture design to mitigate threats.
• Extensive experience in enterprise security document creation.
• Experience in designing and delivering employee security awareness training.
• Experience in developing security incident response plans.
• Experience in anti-virus, penetration testing and general IT and OT security.
• Experience and understanding of the key compliance and regulatory standards in Information Security and Compliance.
• Strong understanding of IP, TCP/IP, and other network administration protocols.
• Experience in cybersecurity designs for systems, networks, and multi-level security requirements or requirements for processing multiple classification levels of data.
• Knowledge of risk management processes and experience in conducting risk assessments.
• Proven experience in capital project planning.
• Familiarity with Windows and Office365 as well as general Cloud-based security.
• Familiarity with ERP systems, e.g. Oracle and SAP.
• Familiarity with industry wide DCS systems such as Emerson & GE would be advantageous.

Certifications:

• • GIAC Security Essentials Certification (GSEC)
  • GIAC Global Industrial Cyber Security Professional (GICSP)
  • ISACA Certified Information Security Manager (CISM)
  • (ISC)2 Certified Information Systems Security Professional (CISSP)
  • (ISC)2 Information Systems Security Management Professional (ISSMP)
  • Microsoft Certified Systems Engineer: Security