Manager, Cyber Security - Information Security Office Consultant

Description

The team is looking for cyber security professionals who enjoy assessing cyber capabilities, threat intelligence and risk management. The role sits at the front of efforts to shape cybersecurity governance, mature security capabilities and transform risk practices across the company.

The company works in a fast-paced, collaborative environment with a strong focus on risk, and the work involves solving real business problems and meeting real customer needs.

Responsibilities

• Lead the continued improvement of cybersecurity capabilities and services by working with stakeholders and running assessments of capability effectiveness and risk practices, using tools and frameworks such as the NIST Cybersecurity Framework (CSF).
• Use cybersecurity data from several sources to generate new insights, risk indicators and program metrics.
• Support control and risk assessments, making sure issues and remediation plans are documented, owned and tracked to closure.
• Push the adoption of automation and tooling that speeds up control monitoring, issue management and risk reporting.
• Summarise key cyber-risk insights for senior management, covering trends, systemic issues and opportunities to reduce risk.
• Mentor and guide associates so cyber-risk management methods are applied consistently and they keep growing professionally.

Requirements

• A bachelor's degree.
• At least 5 years of experience in cybersecurity or information technology.
• At least 5 years of experience running security risk assessments and security architecture reviews.
• At least 5 years of experience with architecture, software design, networking or cloud infrastructure.
• At least 4 years of experience evaluating, contributing to or supporting the development of cybersecurity capabilities.
• At least 4 years of experience in cloud security engineering.
• At least 1 year of experience implementing Artificial Intelligence (AI) in cybersecurity.
• Preferred: 5+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
• Preferred: 5+ years of experience analysing cyber threats, vulnerabilities and risks, or developing solutions for them, or analysing events.
• Preferred: 5+ years of experience working on teams and presenting cybersecurity information such as metrics, threat intelligence, controls and/or requirements to stakeholders.
• Preferred: 4+ years of experience working in multi-cloud environments.
• Preferred: 4+ years of experience using security tools (e.g., Splunk, Crowdstrike, Qualys or AWS Security Hub).
• Preferred: 2+ years of experience developing or interpreting cybersecurity metrics or dashboards.
• Preferred: Demonstrated familiarity with industry governance or financial governance processes.
• Preferred: Experience with risk management concepts, including identifying threats, assessing vulnerabilities and recommending mitigation strategies.
• Preferred: Ability to analyse security incidents and help resolve them, turning technical findings into clear, actionable reports for both technical and non-technical audiences.

Conditions

The company will not sponsor a new applicant for employment authorization or provide any immigration-related support for this position, including H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-3, O-1, or any other work authorization requiring employer immigration support.

Full-time annual base salary in New York, NY is $215,200 to $245,600 for this Manager, Cyber Security role. Pay in other locations follows the range for that location, and the exact salary is stated in the offer letter. Part-time pay is prorated to the agreed hours.

The role is eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives (LTI), and these may be discretionary or non-discretionary depending on the plan.

The role accepts applications for at least 5 business days.

Agencies should not contact the company. The company is an equal opportunity employer and considers qualified applicants with criminal histories in line with applicable law.

Benefits

• Health, financial and other benefits are offered, with eligibility depending on full- or part-time status, exempt or non-exempt status and management level.