Cybersecurity Manager

The IT Cybersecurity Manager will work to ensure that the confidentiality, integrity, and availability of FleetPride’s data and systems is protected against malicious actors. To accomplish this, the person in this role will be expected to perform the selection, implementation, and maintenance of security policies, protocols, and technologies. The Cybersecurity Manager will own all operational Information security efforts, including patch and vulnerability management, cryptography, identity and access management, incident response, and general IT Control developments. The person in this role will be expected to develop security architecture, aligning technologies to support security controls and strategies.

Essential Tasks

• Enable an Incident Response program for timely identification, response and remediation of cybersecurity incidents
• Utilize a comprehensive threat intelligence program to ensure potential risks are identified and mitigated
• Provide oversight for security related operational tasks such as patch management, vulnerability management, and risk mitigation
• Assist in the development and management of new cybersecurity policies, standards and procedures.
• Participate in and understand a vulnerability management program that focuses on priority risks that represent a vector for attack
• Track, categorize and catalog known exceptions to the cybersecurity control environment and ensure compensating practices are implemented
• Develop an IAM program across all enterprise systems
• Continually develop, assess and mature cybersecurity personnel to meet the challenge of an evolving threat landscape

Skills

• Technical Expertise: Ability to adapt to multiple environments with curiosity and intuition.
• Strategic Thinking: Using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions or approaches to problems with an understanding of the impact change may make to the entire environment.
• Excellent Communication Skills: Conveying information to others in an effective manner.
• Honesty/Integrity: No explanation should be required.
• Interpersonal Relationship Acumen: Ability to establish effective professional relationships
• Business Acumen: Ability to understand how technical decisions can impact business operations.
• Active Learning: Understanding the implication of new information for both current and future problem-solving and decision-making.
• Time Management: Managing one's own time and the time of others.
• Coordination: Adjusting actions in relation to others’ actions.
• Learning Strategies: Selecting and using training/instructional methods and procedures appropriate for the situation when learning or teaching new things.
• Problem Sensitivity: The ability to tell when something is wrong or is likely to go wrong. It does involve solving the problem.

Attributes

• Oral Expression: The ability to communicate information and ideas in speaking so others will understand.
• Oral Comprehension: The ability to understand information and ideas presented through spoken words and sentences.
• Written Comprehension: The ability to understand information and ideas presented in writing.
• Written Expression: The ability to communicate information and ideas in writing so others will understand.
• Originality: The ability to come up with unusual or clever ideas about a given topic or situation, or to develop creative ways to solve a problem.
• Deductive Reasoning: The ability to apply general rules to specific problems to produce answers that make sense.
• Inductive Reasoning: The ability to combine pieces of information to form general rules or conclusions (includes finding a relationship among seemingly unrelated events).

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Reaching above shoulder heights, below the waist or lifting as required to file documents or store materials throughout the workday.
• Occasional lifting of items up to 25 pounds (files, computer printouts on occasion)

Environmental/Atmospheric Conditions

The primary environment is characterized by ambient room temperatures, lighting and traditional office equipment found in a typical office environment.

Qualifications

Education

• A bachelor's degree in computer science, computer engineering, or a related discipline is required to work as a technical lead.
• CISA or CISSP certification preferred.

Professional Experience

• At least 7 years of experience performing security risk assessments and security architecture reviews
• Experience in Offensive or Defensive Security techniques
• Experience maintaining PCI compliance
• Good analytical, statistical and financial processes and procedures preferred.

Computer Skills

• Experience using vulnerability management tools.
• Experience in using Microsoft productivity tools like Excel/Access/Visio
• Knowledge of Kali Linux is preferred.
• Knowledge of SQL Server, XML/HTML/CSS and other Web technologies is preferred.

This job description in no way states or implies that these are the only duties to be performed by this employee. He or she will be required to follow any other instructions and to perform any other duties requested by his or her supervisor.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.