Manager, Information Security Tech

24 Nov 2024

Vacancy expired!

Our client is hiring an Information Security Tech Manager on a contract basis.

Work Location: Bethesda, MD

Summary: Here are top 5 skills for this role we are looking for:• Understanding, experience and ability to translate at least one industry security standard / framework including NIST CSF, NIST 800-53, ISO27001, CSL and PCI DSS to IT and Digital product teams. • Strong negotiating, influencing and problem resolution skills in a high-pressure environment. • Experience with securing cloud environments (AWS, Google, Microsoft, Alibaba, etc.). • Ability to apply organizational information security policies at a product & platform squad level. • Experience working in Agile environment. Will be supporting the Business Information Security Partnership (BISP) Directors within Global Information Security (GIS) organization and their assigned products & platforms, while serving as the trusted advisor. The BISP Manager role will support the BISP and liaise on a tactical level between the product & platforms teams and Global Information Security (GIS), keeping clear lines of communication including but not limited to; transparency to the product & platforms on upcoming security initiatives, reporting of security risks to product & platform leader, and the GIS sub-functions. In addition, this role will ensure business compliance with the GIS Policy and Standards while continuously monitoring and reporting on risks and documented exceptions. In supporting the BISP Directors, the incumbent will use their experience and knowledge of information & cyber security as well as their process management, negotiating, influence and problem-solving skills to understand security technology lifecycles and objectives; further, to translate them into mutually beneficial business strategies for their product & platforms clients.

Required Skills:

  • 5+ years relevant work experience including:
    • 3 years' in information security that includes security program management, metrics capture and analysis and technology expertise.
    • 2+ years' supporting the design and implementation of information security programs.
    • 2+ years' supporting implementing enterprise security risk management frameworks and processes.
  • Bachelor's degree in Computer Sciences or related field or equivalent experience/certification.

Preferred: Experience with securing cloud environments (AWS, Google, Microsoft, Alibaba, etc.).
  • Experience working in Agile environment.
  • Knowledge of DevSecOps | application security.
  • Understanding and experience with at least one industry security standard / framework including NIST CSF, NIST 800-53, ISO27001, CSL and PCI DSS.
  • Understanding of key network and technical security controls.
  • Knowledge of global regulatory standards to include GDPR, CCP, etc.
  • Ability to demonstrate security experience via certifications (Security +, CISSP, CISA, CRISC, CISM, etc.) or significant career accomplishments in technology.
  • Ability to apply organizational information security policies at a product & platform squad level.
  • Strong negotiating, influencing and problem resolution skills in a high-pressure environment.
  • Knowledge of business environment, service requirements and hospitality culture.

CORE WORK ACTIVITIES
  • Support the BISP with thought leadership to business/discipline to align technology with business strategies.
  • Attend initiative/project/program meetings representing the BISP function and GIS.
  • Provides input to Product & Platform technology roadmaps.
  • Provides leadership to Product & Platform squads units for the implementation of GIS policy, procedures, patterns and standards.
  • Participates in forums for technology governance and portfolio management and prioritization.
  • Negotiates trade-offs within and across different solution platforms & products.
  • Provides insights on impacts of the timing of solution introduction and technology retirement.
  • Fosters strong relationships to fully understand Product & Platform business needs.
  • Assists with risk assessment and security architecture/engineering completeness of any exceptions to standard baselines and company policy.
  • Proactively identifies information security deficiencies or opportunities for improvement to better enable information security at the global level. Lead the development of pragmatic solutions across GIS by engaging the relevant subject matter experts.
  • Provides communication or escalation path for information security issues identified by GIS or the Product & Platform squads.
  • Provides regular, timely reporting on the information security status across the supported Product & Platforms.
  • Supports acquisition due diligence for information security risks and support control design for integration.
  • Participates in reporting requirements, monthly/quarterly status meetings and offsites as appropriate.
  • Represents the BISP at meetings and acts on behalf of as requested.

Program Management
  • Supports Global Technology (GT) in modeling and planning phases for new initiatives under consideration.
  • Collaborates with Enterprise Architecture (EA) to confirm proposed solutions are compatible with GIS standards & patterns.
  • Accountable for the development accurate business requirements, validating that secure solutions will meet product & platform needs prior to development.
  • Partners with customer and GT squads to complete business cases by providing relevant GIS information and monitoring its ability to meet all relevant GT standards.
  • Aligns initiatives / projects with technology roadmaps and EA technology.
  • Monitors initiative & project risk management; creates and implements mitigation plans for each risk.

Cultivate a High-Performing Team
  • Generates enthusiasm and understanding of the information security vision and how each role contributes to the achievement of that vision.
  • Creates and sustains a work environment that drives associate engagement and enables business success.
  • Ensures appropriate processes are in place and executed to drive collaboration and alignment within the team and with the broader GT organization.
  • Serves as a role model and ensure all information security leaders are visible and effective partners with GT counterparts, broader company stakeholders, and service providers.

MANAGEMENT COMPETENCIES

Leadership
  • Communication - Conveys information and ideas to others in a convincing and engaging manner through a variety of methods.
  • Leading Through Vision and Values - Keeps the organization's vision and values at the forefront of employee decision making and action.
  • Managing Change - Initiates and/or manages the change process and energizes it on an ongoing basis, taking steps to remove barriers or accelerate its pace; serves as role model for how to handle change by maintaining composure and performance level under pressure or when experiencing challenges.
  • Problem Solving and Decision Making - Identifies and understands issues, problems, and opportunities; obtains and compares information from different sources to draw conclusions, develops and evaluates alternatives and solutions, solves problems, and chooses a course of action.
  • Professional Demeanor - Exhibits behavioral styles that convey confidence and command respect from others; makes a good first impression and represents the company in alignment with its values.
  • Strategy Development - Develops business plans by exploring and systematically evaluating opportunities with the greatest potential for producing positive results; ensures successful preparation and execution of business plans through effective planning, organizing, and on-going evaluation processes.

Managing Execution
  • Building a Successful Team - Uses an effective interpersonal style to build a cohesive team; inspires and sustains team cohesion and engagement by focusing the team on its mission and importance to the organization.
  • Strategy Execution - Ensures successful execution across of business plans designed to maximize customer satisfaction, profitability, and market share through effective planning, organizing, and on-going evaluation processes.
  • Driving for Results - Sets high standards of performance for self and/or others; assumes responsibility for work objectives; initiates, focuses, and monitors the efforts of self and/or others toward the accomplishment goals; proactively takes action and goes beyond what is required.

Building Relationships
  • Customer Relationships - Develops and sustains relationships based on an understanding of customer/stakeholder needs and actions consistent with the company's service standards.
  • Global Mindset - Supports employees and business partners with diverse styles, abilities, motivations, and/or cultural perspectives; utilizes differences to drive innovation, engagement and enhance business results; and ensures employees are given the opportunity to contribute to their full potential.
  • Strategic Partnerships - Develops collaborative relationships with fellow employees and business partners by making them feel valued, appreciated, and included; explores partnership opportunities with other people in and outside the organization; influences and leverages corporate and continental shared services and/or discipline leaders (e.g., HR, Sales & Marketing, Finance, Revenue Management) to achieve objectives; maintains effective external relations with government, business and industry in respective countries; performs effectively as a liaison between locations, disciplines, and corporate to ensure needed resources are received and corporate strategies are understood and executed.

Generating Talent and Organizational Capability
  • Developing Others - Plans and supports the development of others' skills and capabilities so that they can fulfill current or future job/role responsibilities more effectively; provides high visibility to individuals with potential; offers challenging assignments that build confidence and credibility and provides such individuals with a personal vision for their future.
  • Organizational Capability - Evaluates and adapts the structure of assignments and work processes to best fit the needs and/or support the goals of an organizational unit.

Learning and Applying Professional Expertise
  • Business Acumen - Understands and utilizes business information to manage everyday operations and generate innovative solutions to approach business and administrative challenges.
  • Technical Acumen - Understands and utilizes professional skills and knowledge in a specific functional area to conduct and manage everyday business operations and generate innovative solutions to approach function-specific work challenges.
  • Technical Intelligence: knowledge and ability to identify technological opportunities and threats that could affect the future growth and survival of the business

    .
  • Technology Life Cycle: knowledge of the Life Cycle of technologies and how applications, infrastructure, and processes relate to these timelines.
  • IT Systems: Knowledge of IT systems supporting the business including benefits, requirements, costs, justification, and operations.
  • IT Resources: The ability to secure and manage IT resources to achieve business objectives (e.g., contracts, vendor relationships, financial accountability, portfolio management, information and resource planning) and measure project impact.
  • Continuous Learning - Actively identifies new areas for learning; regularly creates and takes advantage of learning opportunities; uses newly gained knowledge and skill on the job and learns through their application.
  • Strategy Knowledge - Understanding and utilizing professional skills and knowledge in a specific functional area to conduct and manage business operations and generate innovative solutions to approach function-specific strategic work challenges.
  • Basic Competencies - Fundamental competencies required for accomplishing basic work activities.
  • Basic Computer Skills - Uses basic computer hardware and software (e.g., personal computers, word processing software, Internet browsers, etc.).
  • Mathematical Reasoning - Adds, subtracts, multiplies, or divides quickly, correctly, and in a way that allows one to solve work-related issues.
  • Oral Comprehension - Listens to and understands information and ideas presented through spoken words and sentences.
  • Reading Comprehension - Understands written sentences and paragraphs in work related documents.
  • Writing - Communicates effectively in writing as appropriate for the needs of the audience.
  • Apply Now
The post Manager, Information Security Tech appeared first on TSR Consulting Services.

  • ID: #23392219
  • State: Maryland Bethesda 20817 Bethesda USA
  • City: Bethesda
  • Salary: USD TBD TBD
  • Job type: Contract
  • Showed: 2021-11-24
  • Deadline: 2022-01-22
  • Category: Security