Cyber and Technology Risk Manager

• Build relationships with business units to deliver security-by-design controls incorporated into projects, architecture, infrastructure, and applications
• Identify, articulate, and document threats and vulnerabilities that may impact the business and address them regularly with business units
• Maintain up-to-date knowledge related to security threats, vulnerabilities, and mitigations set forth to reduce the attack surface; circulate this knowledge through the business units
• Support the CISO, management team, and executive leadership even during tumultuous times

• Bachelor’s degree in computer science, information assurance, MIS or related field, or equivalent industry experience
• At least 5+ years’ experience with varying focus in application and infrastructure security, as well as risk and controls assessment
• Applicable knowledge of national and global cybersecurity policies, regulations, and security frameworks
• Certification: CISSP, CISM, CRISC, CISA, OSWE

Demonstrates expertise in application and infrastructure security, risk and controls assessment, and the implementation of security-by-design principles. Maintains current knowledge of cybersecurity policies, regulations, and frameworks to effectively mitigate threats and vulnerabilities.

• Application Security
• Infrastructure Security
• Risk Assessment
• CISSP Certification
• CISM Certification

• Threat Identification
• Vulnerability Assessment
• Security Frameworks
• Security Controls
• Mitigation Strategies

• Relationship Building
• Communication
• Support for Leadership

• CISSP
• CISM
• CRISC
• CISA
• OSWE

• Cybersecurity Policies
• Security Regulations
• Security Threats
• Attack Surface Reduction