安全项目经理
Security Program Manager
**职位名称:** 安全计划经理
**工作地点:** 远程（美国，纽约/东部时间区优先）
**关于 Rhymetec:**
Rhymetec 于 2015 年在纽约市成立，稳步发展合规、网络安全和数据隐私领域。我们的使命是帮助客户更快实现合规，让他们能够专注于核心业务，而不是构建有效且合规的信息安全计划的复杂性。
**岗位职责**
- 从范围定义到交付，为 Rhymetec 的客户提供大规模的网络安全计划管理。
- 管理一小队安全分析师，以实施必要的安全措施。
- 为 Rhymetec 的客户建立信息安全计划。这包括根据各种网络安全框架进行差距分析、进行风险评估，并制定创建和增强网络安全计划的整体策略。
- 实现并保持 Rhymetec 客户选择的网络安全框架的合规性——代表客户参与并管理 SOC 2、ISO 27001、PCI 以及其他外部审计，并向 CPA 和/或 QSA 提供证据。
- 为 Rhymetec 的客户提供项目管理支持，并制定任务和里程碑以达成所需目标。
- 确保安全分析师按时完成必要工作，避免延误。
- 确保客户按时达成所需的安全目标，如合规框架。
- 监控并执行对客户请求的响应 SLA。
- 开发跟踪项目进度和绩效的方法。分析结果以确定潜在问题、风险和改进点。
- 改进并维护客户留存率。
- 每年有最多两周的出差安排。
**任职要求**
- 4 年以上网络安全和 GRC 工作经验
- 2 年以上计划管理经验
- 在快节奏、多计划环境中有出色表现的能力，能应对不断变化的优先级
- 有管理瀑布模型、混合型和敏捷交付团队的经验
- 良好的领导能力，包括在没有直接权威的情况下影响他人并获得共识的能力
- 能够预见潜在问题并主动排查解决
- 理解云架构和现代云系统
- 项目管理技能
- 人员管理和委派技能
- 持有 CISSP、CISM、CRISC 网络安全认证者优先
- 持有 PMP 项目管理认证者优先
**福利：**
Rhymetec 提供丰富的福利。
查看英文原文
**Title:** Security Program Manager
**Location:** Remote (U.S., New York / EST Time Zone Preferred)
**About Rhymetec:**
Rhymetec was founded in New York City in 2015, growing steadily in the areas of compliance, cyber security and data privacy. Our mission is to ensure our clients are compliant faster, so they can focus on their core business and less on the complexities of building effective and compliant infosec programs.
**Job Responsibilities**
- Lead technical cyber security programs from scoping to delivery at scale for Rhymetec’s customers.
- Manage a small team of Security Analysts to implement necessary security measures.
- Build information security programs for Rhymetec’s clients. This includes conducting gap assessments against various cyber security frameworks, conducting risk assessments, and overall building strategy for creating and enhancing cyber security programs.
- Achieve and maintain compliance for cyber security frameworks selected by Rhymetec’s customers - participate and manage SOC 2, ISO 27001, PCI, and other external audits on behalf of customers, and provide evidence to CPA’s and/or QSA’s.
- Lead project management for Rhymetec’s customers and create tasks and milestones to achieve required objectives.
- Ensure security analysts are completing necessary work on time without delays.
- Ensure customers achieve the required security objectives such as compliance frameworks on time.
- Monitor and enforce SLAs for responding to customer requests.
- Develop methods of tracking project progress and performance. Analyze results to determine potential issues, risks, and enhancements.
- Improve and maintain customer retention.
- Availability to travel up to 2 weeks out of the year.
**Qualifications**
- 4+ years working in cybersecurity and GRC
- 2+ years of program management
- Demonstrated ability to function in a fast-paced, multi-program environment with changing priorities
- Previous experience in managing waterfall, hybrid, and agile delivery teams
- Good leadership skills include the ability to influence and gain consensus in the absence of direct authority
- Ability to anticipate potential problems and proactively troubleshoot to resolve issues
- Understanding of cloud architecture and modern cloud systems
- Project management skills
- People management and delegation skills
- CISSP, CISM, CRISC cyber security certification is preferred
- PMP project management certification is preferred
**Benefits:**
Rhymetec offers a robust employee package, including:
- No cost medical coverage for employees
- Dental and Vision Benefits
- PTO and Sick Time, including 11 paid Holidays
- 401K retirement option
- Company paid Life Insurance
- Summer Friday's!
- Annual career growth stipend - we want to see you thrive
- Annual Subscription to TalkSpace (online counseling & therapy service)
Rhymetec is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetic, disability, age, or veteran status.