Cyber Security Technical Manager
作为全球 IT 团队成员，你将帮助开发和维护网络安全计划并担任事实上技术安全专家。该职位负责为内部和外部团队提供支持和监督以确保事件和威胁得到适当处理。一个合格的候选人会感到舒适地跳进给定的场景，提出正确的问题，在必要时升级，并与所有可用的资源合作寻找最佳解决方案。责任：· 设计，实施和维护计算机和信息安全工具，战术和程序。· 支持创建事件应对计划，并通过协助团队成员解决或缓解问题来协调调查和修复威胁和与安全有关的事件。· 根据需要设计和构造安全系统。· 持续评估和改善组织网络安全控制。· 咨询项目团队关于新项目的或技术的安全要求。· 为 CVE,国际奥委等制定减轻或修复计划。· 支持和管理服务提供者符合网络安全路线图并在达成协议的时间内实现项目和目标。知识，技能和属性 · 能够独立工作，以及在分布式团队环境中拥有强大的解决方案的责任感。· 舒适地与高级领导者合作，但仍然能参与系统的细节和配置。· 在提供特定或全球性的解决方案方面影响不同利益相关者的能力。· 注意详细，组织性和能够独立工作和研究。· 能够为技术和非技术观众制定和传达安全和风险相关概念。· 优秀的沟通和协作技能以确保在一个矩阵组织中的交付。· 具有在一个或多个安全实践领域 （终端保护，漏洞管理，网络安全管理，云安全，事件响应，数据安全和隐私）的专业知识。· 有广泛的信息技术基础设施以及与 MITRE ATT&CK,CIS,NIST-CSF 等相关安全相关法规等安全框架和标准的经验。·能够有效地分析风险。
查看英文原文
Key purpose:
As a member of the Global IT Team, you will help develop and maintain the cyber security program and serve as the de facto technical security expert. This role is responsible to provide support and oversight to internal and external teams to ensure incidents and threats are properly handled.
A well-qualified candidate will feel comfortable jumping into a given scenario, asking the right questions, escalating where necessary, and collaborating with all available resources to find the best solution for the situation.
Duties and responsibilities:
- Support the design, implementation, and maintaining of cyber and information security tools, tactics, and procedures.
- Support the creation of incident response plans and coordinate the investigation and remediation of threats and security-related incidents by assisting team members with issue resolution or mitigation.
- Design and architect security systems as needed.
- Continuously assess and improve the organizations cyber security controls.
- Advise project teams on security requirements for new projects or technology.
- Development of mitigation or remediation plans for CVEs, IOC, etc.
- Support and manage service providers in aligning to the cyber security roadmap and delivering projects and objectives within the agreed timelines.
Knowledge, Skills, and Attributes
- Ability to work independently as well as in a distributed team environment with a strong sense of ownership of delivering solutions.
- Comfortable in taking and engaging with senior leadership, however, still able to get involved in the detail and configuration of systems.
- Ability to influence different stakeholders in delivering site specific or global solutions.
- Attention to detail, organized and able to work and research independently.
- Ability to frame and communicate security and risk-related concepts to technical and non-technical audiences at various levels.
- Excellent communication and collaboration skills to ensure delivery in a matrix organization.
- Strong IT background with expert level knowledge in one or more security practice areas (endpoint protection, vulnerability management, network security management, cloud security, incident response, data security & privacy)
- Broad knowledge and experience across IT infrastructure with security frameworks and standards such as MITRE ATT&CK, CIS, NIST-CSF and other relevant security-related regulations.
- Able to effectively analyze risk within the context of business problems.
- Solid understanding as to how to mitigate risks with common security controls.
- Passion for Cybersecurity, continually learning about new attacks, new threat vectors, and defenses.
- Ability to travel to various sites and meet with service providers.
- Familiar with Microsoft 365 Compliance manager and Azure Cloud security modelling
Qualifications and experience:
- Bachelor's degree in computer science or related discipline
- Minimum of five years of cybersecurity experience.
- Experience in reviewing and evaluating new software or technology components.
- Experience with hands-on configuration and operation of security tools.
- Experience in participation or leading the successful implementation of security systems and operationalizing them (documenting requirements, working with vendors, setting up & configuring, creating knowledge articles, performing handover to relevant operations team).
- Professional experience delivering cyber security in an operational role, including
- Cyber Security architecture design and implementation, including Cloud.
- Security Operations Centers (SOC)
- Identity & Access Management (IAM)
- Data Loss Prevention and Data Protection
- Security assessments related to threat, vulnerability, and penetration testing.
- Endpoint detection response
- Vulnerability management tools and process
- Security information and event management (SIEM)
- Intrusion prevention system (IPS)
- Network & user anomaly detection
- Performing system hardening
- Threat hunting
Originally posted on Himalayas