Company: Barton Malow Holdings
Job Location: Southfield, MI
Position: Cybersecurity Manager
Req ID: 11297
POSITION SUMMARY
The Cybersecurity Manager is responsible for overseeing the implementation and execution of a robust cybersecurity program to protect the organization from cyber threats. This role involves leading the day-to-day operations of the cybersecurity team while growing the organization's cybersecurity capabilities. Additionally, this role is tasked with leading efforts related to identifying vulnerabilities, providing remediation recommendations, and managing incident response procedures. Having a proactive approach to cybersecurity and excellent communication skills to educate the organization on cybersecurity topics is crucial to this role. The ideal candidate for this position is someone with strong technical skills who can prioritize work while also effectively managing relationships with internal staff and stakeholders.
KEY JOB RESPONSIBILITIES:
- Monitors for potential security threats and vulnerabilities, taking proactive measures to mitigate risks.
- Manages the response to cybersecurity incidents, including conducting thorough investigations and implementing corrective actions.
- Develops and oversees comprehensive cybersecurity programs and policies.
- Ensures compliance with cybersecurity standards through internal and external audits.
- Coordinates with other stakeholders to ensure a cohesive approach to cybersecurity across the organization.
- Oversees cybersecurity awareness and training programs for employees.
- Assesses and manages cybersecurity risks associated with third-party vendors and partners.
- Evaluates and manages relationships with cybersecurity vendors and service providers.
- Creates and updates cybersecurity procedures to address emerging threats and regulatory changes.
- Develops and tracks key performance indicators (KPIs) to measure the effectiveness of the cybersecurity program.
- Provides training, mentorship, and development opportunities to members of the cybersecurity team.
REQUIRED KNOWLEDGE, EDUCATION, EXPERIENCE, SKILLS, AND ABILITIES:
- Bachelor’s degree in Computer Science, Cybersecurity, or related field or equivalent work experience.
- 5-7 years of experience in security operations, vulnerability management, security engineering, incident response, or offensive security required.
- 2-3 years of experience managing a cybersecurity team and cybersecurity projects.
- Conceptual and technical knowledge of modern IT environments such as server configuration/architecture, cloud, database management/configuration, networking protocols/designs, and access management/access controls.
- Strong technical skills with knowledge of a wide variety of tools, and technologies, and experience deploying and monitoring these capabilities to identify cyber threats.
- Knowledge of common cybersecurity frameworks and how to employ them within security operations. e.g, NIST CSF, MITRE ATT&CK
- Demonstrated interpersonal skills and ability to work effectively and collaboratively with a wide range of stakeholders.
- Excellent verbal and written communication skills to effectively convey security concepts to technical and non-technical stakeholders.
- Experience in scripting and programming languages such as PowerShell, Bash, or Python is preferred.
- Cybersecurity training or certifications from organizations such as CompTIA, TCM, SANS/GIAC, OffSec, ISC(2) is preferred.