Manager - Cybersecurity

GENERAL STATEMENT OF RESPONSIBILITY:

Responsible for the full execution of CRL’s Information Security Management (ISMS) with continual monitoring of the performance of the program and related activities, taking appropriate steps to improve effectiveness and keep in compliance with regulations.

• Direct all aspects of corporate security and access control.
• Implement policies and procedures to limit access to IT facilities and equipment.
• Develop and implement security guidelines, standards, procedures, and training for multiple platforms and diverse system environments.
• Establish and maintain monitoring for security events; investigating, analyzing, and coordinating security event responses; and recommending appropriate corrective actions.
• Support the development and management of CRL’s Data Center Recovery Plan and the security elements of CRL’s business continuity plan, including data backup and disaster recovery.
• Maintain alignment with CRL Privacy Officer to ensure correlation of Security and Privacy activities.
• Identify and assess security risks and exposures on new and existing infrastructure.
• Develop and maintain security best-practices, policies, and controls, and monitoring and recommending appropriate corrective action to ensure their compliance.
• Monitor corporate compliance with policies and procedures related to physical access to all corporate facilities and equipment, including all those related to IS, such as computer rooms and systems, network rooms and equipment, telephone facilities, etc.
• Implement policies and procedures to ensure the security and efficacy of CRL’s corporate email system.
• Implement policies and procedures to ensure proper and appropriate access to and from the Internet and CRL’s internal networks.
• Conduct active penetration tests; discovering vulnerabilities in information systems, recommending corrective action, and monitoring and escalating to ensure appropriate fixes are implemented.
• Provide technical consulting in the development and implementation of cybersecurity strategies for both SBU and IS initiatives.
• Perform security risk assessments of the different business units, relevant external suppliers and the corporate systems and infrastructure and reviewing network architecture, server administration, and product development.
• Evaluate and recommend solutions, best practices, and standards for enterprise security infrastructure including authentication and authorization services, intrusion detection, firewalls, and virus management.
• Support IT Business Directors by assisting, from a security and access control position, in applicable audits and client visits.
• Secure communication channels and guard against and responding to network attacks.
• Conduct regular audits of software development and other IT processes to ensure appropriate quality is delivered in these processes.
• Identify, capture and trend metrics to track the performance of the IT department related to completion of tasks on time, code defects and adherence to information security procedures.
• Act as a key stakeholder in the quality management system team.
• Set strategic performance improvement goals for the IT department related to its various service centers.
• Assist the IT department is executing on process improvement initiatives.
• Maintain professional and technical knowledge by attending educational training forums/workshops; reviewing professional publications; establishing personal networks, participating in professional societies.
• Continually develop management skills through available training resources, including offsite professional training.
• Be proactive in bringing ideas to management’s attention to improve recruiting, productivity, service, quality, policies and procedures, cost savings, and utilization of company resources.
• Ensure concerns are raised to the appropriate level of management.
• Maintain and protect the confidentiality of all CRL, CRL subsidiaries, legal entities and client information.
• Be able to comply with all applicable federal, state, and local safety and health regulations that would apply to this job.
• Other duties as assigned.

EDUCATION:

Bachelor’s degree in…