Job Description
Cybersecurity Manager
Job Locations US-Remote
ID
2021-1751
# of Openings
1
Category
Security and Privacy Consulting
Overview
The Cyber Security Manager is responsible for managing and performing engagements related to a variety of technical assessments. Managers must have deep subject matter expertise, the ability to interface directly with clients to lead successful and positive engagements, and the capacity to manage and mentor teams of junior resources. The Cyber Security Manager is an integral part of delivery team and is responsible for reviewing draft deliverables, building relationships with client contacts, and providing technical guidance and consulting during engagements. Because much of the work takes place on-site at client locations, frequent travel will be required.
Responsibilities
What you will get to do:
Experience with the performance of Business Impact Analyses (BIAs) along with development of business continuity and disaster recovery plans (BCPs and DRPs)
• Managing and performing cybersecurity control assessments in a wide variety of business environments, including:
• NIST Cybersecurity Framework (CSF)
• HIPAA Security Rule
• Cloud Security Controls
• Understanding of data protection, classification, and management controls
• Understanding of cybersecurity policies and procedures
• Providing trusted advisory services and guidance to clients that will reduce organizational risk and improve their overall security posture
• Preparing and reviewing reports and other deliverables that contain strategy, technical analysis, and findings in connection with our advisory and assessment engagements and communicating those results to client management
• Managing staff in the completion of engagements on time with limited necessary revision
• Assisting with business development activities, as a subject matter expert, including proposal development and sales calls
• Preparing proposals and statements of work for future engagements
SUPERVISORY RESPONSIBILITIES:
• Managing teams of consultants and senior consultants in client engagements
• Training, mentoring, and development of assigned team consultants
Qualifications
Minimum Qualifications
• 4+ years of relevant experience in the field(s) of IT Audit, Consulting, and/or Security, Privacy or Risk Management.
• Understanding of or experience with industry and regulatory frameworks and standards, including but not limited to: PCI DSS, NIST SP 800-30, NIST CSF, ISO 27000 series, Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM), Center for Internet Security (CIS) Top 20 Critical Security Controls (CSC), HIPAA Security Rule and HITECH Act, and information security requirements of Generally Accepted Privacy Principles (GAPP)
• Knowledge and/or experience assessing firewalls, server operating systems, security tools (e.g., anti-virus, intrusion detection/prevention systems), and cryptography
• Working knowledge of network, database, and application-level security
• Bachelor's degree in Management Information Systems, Computer Information Systems, Computer Science, Engineering or a related field
Preferred Qualifications:
• Advanced written and verbal communication skills
• Strong interpersonal skills and the ability to foster close professional relationships with clients
• Strong project management skills and the ability to manage multiple projects and teams in parallel
• Strong analytical skills and the ability to understand complex client business processes
• An understanding of the importance of business ethics
• Qualities such as professionalism, attention to detail, strong organizational skills, team-focus, dedication, resourcefulness, and an eagerness to learn
• Strong proficiency with Microsoft Windows, MacOS, and the Microsoft Office suite of products, (i.e. Word, Excel, Visio, PowerPoint)
• Obtained or working towards Certified Information Systems Security Professional (CISSP) certification. (Candidates that do not yet possess the CISSP will be required to obtain the certification after hire.)
• CISA, CIPP, CISM, PCI-QSA, CCSP, or related certifications.
About Focal Point
Focal Point is a leading cyber security and risk consulting firm with over 340 employees within 16 offices across the U.S. and Canada. Focal Point provides a wide range of governance, risk, and compliance consulting and advisory services to organizations across industries, businesses, and government agencies that vary in complexity and size.
Focal Point has grown into a key player in the technology and business consulting industry and has innovated a model to provide talented, forward-thinking consulting for its clients across the country. Focal Point has developed a culture based on teamwork, professional growth, and a commitment to work-life balance. For these reasons, Focal Point enjoys tremendous employee satisfaction and retention rates with additional employee offerings such as:
• Unlimited PTO
• 401(k) with company match
• Healthcare, dental and vision coverage
• Short and long term disability coverage
• Sponsored certifications
• Cross-functional training
• Internal growth opportunities
Equal Opportunity
Focal Point is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you'd like to view a copy of the company's affirmative action plan or policy statement, please email hr@focal-point.com .
If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact Tracy MacMillan at 813-400-1142 or HR@focal-point.com . This telephone line and email address is reserved solely for job seekers
Focal Point is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you'd like to view a copy of the company's affirmative action plan or policy statement, please email hr@focal-point.com.
If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact Tracy MacMillan at 813-400-1142 or HR@focal-point.com. This telephone line and email address is reserved solely for job seekers with disabilities requesting accessibility assistance or an accommodation in the job application process. Please do not call about the status of your job application if you do not require accessibility assistance or an accommodation. Messages left for other purposes, such as following up on an application or non-disability related technical issues, will not receive a response.
For more information on applicable equal employment regulations, refer to the EEO is the Law poster.
Compensation and Hours
Salary Range: Not Available DOE (Depends on Experience) Not Available Other Benefits: Not Available Full or Part Time: Full Time (30 Hours or More) Job Duration: Over 150 Days Type of Job: Regular
Shift: Not Applicable
Hours per Week:
Hours Not Specified
View what local employers are paying Information Security Analysts