Cybersecurity Manager

As the local Cyber management presence, provide guidance and support for the area. Establish role as a local presence and focal point for business and IT contact. Create the relationships. As the local Cyber management presence, provide guidance and support for the area.

• Review, analyze, design, and advise on security controls, configurations, and implementations for IT projects
• Continuously improve the integration and effectiveness of implemented technologies
• Maintain awareness of cybersecurity threats, events, tactics, techniques, and procedures (TTPs)
• Identify cybersecurity operations technology gaps, deficiencies, and recommend corrective actions
• Assist with the planning, testing, tracking, remediation for identified cybersecurity operational weaknesses
• Identify, create and mature cybersecurity operations processes
• Work with IT risk assessment function to ensure the proper security configurations and controls are implemented for IT projects
• Provide pros/cons of security solutions impact business strategies
• Create documentation of findings and recommendations (root cause and risk analysis as needed
• Assist with forensic investigations and incident response team (CIRT) activities.
• Assign work to Cyber SOC for remediation
• Escalate pertinent findings in a timely manner
• Leverage vendors and internal resources to interface various security tools to automate critical response tasks
• Support Compliance managers in providing Cybersecurity artifacts
• Align information cybersecurity operations with NIST, and ISO 27001 requirements
• Establish role as a local presence and focal point for business and IT contact. Create the relationships.
• As the local Cyber management presence, provide guidance and support for the area.
• Build and establish a strong relationship with Local IT in the area offices to ensure both interests initiatives and needs are addressed.
• Work with local management to understand any area of concern or upcoming needs for Cyber.
• Communicate Cyber initiatives and changes to local management and IT operations.
• Assist with the review, identification, development, and implementation of effective security controls, processes, and policies to improve security posture and identify gaps in existing controls
• Serve as an internal trusted advisor providing security services, advice on security, and assist with compensating control alternatives where security requirements cannot be met.
• Maintain awareness of emerging threats and technology to ensure there are adequate controls in place.
• Assist in the analysis, design and development of an Information Security roadmap aligned with McDermott’s business strategies.
• Assist with strategic goals and objectives for the department and provide written and verbal updates to senior IT and business leadership.
• Assist with the review, identification, development, and implementation of effective security controls, processes, and policies to improve security posture and identify gaps in existing controls.
• Assist with Cyber security awareness initiatives and events
• Assist with incident response planning and activities

• Bachelor’s Degree in Information Technology (minimum) or equivalent experience and certifications
• 7 or more years of experience working in Information Security or relevant IT technical roles with increasing responsibility
• CISSP, CISM, GSEC, or equivalent accepted cyber management certification
• Working knowledge of the following Information Security domains, 4 required
• Security Operations
• Network Security
• Vulnerability and Threat Management
• Identity and Access Management (IAM)
• Database Security
• Application Security
• 2 or more years of experience in an IT management role
• 2 or more years of experience in an IT architect role
• 5 or more years of experience managing or delivering IT projects
• 3 or more years of experience with perimeter security administration (Web proxy, SMTP gateway, firewall)
• 3 or more years of experience with security information and event management (SIEM) tools
• 3 or more years of experience with endpoint protection tools
• 2 or more years of experience working with threat intelligence feeds and IOCs
• Cybersecurity…