security manager

Smithsonian Institution

Assistant Security Manager

Experian

<div><div>Role Overview</div><br>
<p></p><ul><li>Lead and mentor a team of application security engineers and penetration testers.</li><li>
Guide team members&rsquo; daily project and operational activities</li><li>
Manage and mature the application security program through direct interactions.</li><li>
Actively seek to improve our application security and penetration testing operations.</li><li>
Identify improvement opportunities in all processes and activities involved.</li><li>
Participate in security and technology strategic planning to ensure identified risk governance is incorporated into the enterprise strategy.</li><li>
Appropriately assess risk and provide software security advice when business decisions are made.</li><li>
Set strategies, processes and oversee the management and operations of SAST, SCA, DAST, and penetration testing operations to provide coverage for the application portfolio.</li></ul><ul><li>
Function as a subject matter expert in application, network and cloud penetration testing, scanning platforms, exploits, tools, and techniques.</li><li>
Building and executing a security testing strategy and lead AI first transformation to improve effectiveness and efficiency of our services.</li><li>
Manage test resources to ensure maximum performance.</li><li>
Ensuring secure outcomes of application and configuration testing.</li><li>
Oversee vulnerability identification and measurement.</li><li>
Guide development teams through a review of their applications and risks against common application flaws like OWASP Top 10 and others Provide visibility to senior management along with context and prioritization of the issues.</li><li>
Operate as an advocate for Security in interactions with internal and external teams.</li><li>
Work with Risk &amp; Compliance teams on SOC 2, PCI-DSS, HIPAA, and other audits as needed Research and recommend policy and procedures as they relate to Application Security</li><li>
Lead projects to implement security technologies for the entire enterprise.</li><li>
Define security guardrails through automated tool policies, SLAs, custom rules, and support the developer community.</li><li>
Help the enterprise manage vulnerabilities across automated tooling and manual security assessments.</li><li>
Work with Champions to build relationships and ensure key activities are supported and deliverables are achieved in a timely manner.</li><li>
Support the AppSec technical team and ensure relationships with Business and team maximised and effective.</li></ul><br>
<p></p>
<br>
<div>Experience and Skills</div><br>
 <ul><li>Four-year college diploma or university degree in computer science or computer engineering, and/or 5 years equivalent work experience in application development.</li><li>
Preferred certifications are listed as follows OSCE3, OSCE, OSCP, OSWE, CCSAS, CCT, CRT, GXPN, CISSP or CSSLP or similar certification.</li><li>
3-5 years supervisory experience preferred.</li><li>
8-13 years direct experience in enterprise-level applications security.</li><li>
Previous experience leading teams of penetration testers strongly encouraged and highly desired.</li><li>
Experience with cloud-based application architectures</li></ul><br>
<br>
<div>About Experian</div><br>
<p>Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realize their financial goals and help them save time and money.</p><p>
We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.</p><p>
We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.</p>
<p>Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI, work/life balance, development, authenticity, collaboration, wellness, reward &amp; recognition, volunteering... the list goes on. Experian's people first approach is award-winning; World's Best Workplaces&trade; 2024 (Fortune Top 25), Great Place To Work&trade; in 24 countries, and Glassdoor Best Places to Work 2024 to name a few. Check out Experian Life on social or our Careers Site to understand why.</p><p>
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.</p><div></div><p>
Experian Careers - Creating a better tomorrow together</p></div><p></p>

Application Security Manager

NYC Mayor's Office of Criminal Justice

<div>
 All jobs
 <br/>
 <br/>
 Network Security &amp; Infrastructure Manager
 <br/>
 <br/>
 <ul>
  <li>
   Agency: OFFICE OF CRIMINAL JUSTICE
   <br/>
   <br/>
  </li>
 </ul>
 Posted on
 <br/>
 <br/>
 07/08/2026
 <br/>
 <br/>
 <ul>
  <li>
   Job type: Full-time
   <br/>
   <br/>
  </li>
 </ul>
 Location
 <br/>
 <br/>
 MANHATTAN
 <br/>
 <br/>
 <ul>
  <li>
   Title Classification: No exam required
   <br/>
   <br/>
  </li>
 </ul>
 Department
 <br/>
 <br/>
 Program Staff
 <br/>
 <br/>
 Salary range: $68,213.00 &ndash; $150,000.00
</div>


Network Security & Infrastructure Manager

Baylor College of Medicine

Job Description
<br><br>
<b>Job Title:</b> Manager, IT Infrastructure and Systems (Security)
<br><b>Division:</b> Information Technology
<br><b>Work Arrangement:</b> Hybrid
<br><b>Location:</b> Houston, TX
<br><b>Salary Range:</b> $111,118 - $130,728
<br><b>FLSA Status:</b> Exempt
<br><b>Work Schedule:</b> Monday – Friday, 8 a.m. – 5 p.m.
<br><br>
Summary
<br><br>
We are seeking an experienced Manager of IT Infrastructure and Systems to lead the integration of complex Texas Heart Institute (THI) infrastructure and cybersecurity programs into existing Baylor College of Medicine (BCM) operations. This role will partner closely with THI stakeholders to assess technical requirements, ensure continuity of services, and guide the migration and consolidation of applications, servers, networks, telephony, and related systems into BCM’s environment.
<br><br>
Job Duties
<br>On behalf of two IT "Phase 2" projects, works with THI stakeholders to ensure all interests are accounted for and attended to as all user technologies and supporting systems/infrastructure are migrated to BCM technologies/systems. This may require working with 15+ BCM / THI technologists, professional services firm, Legacy THI stakeholders as well as Common Spirit (provides support to some existing THI technologies).
<br>Oversees the transition of all clinical and research security controls into BCM’s cybersecurity framework, ensuring full alignment with institutional standards.
<br>Identifies and prioritizes risks, develops and harmonizes GRC controls, and advances SecOps practices in coordination with BCM’s Managed Security Services team.
<br>Understands how tech is implemented and used and ensures proper controls are established to ensure continued regulatory compliance when fully migrated to BCM operations.
<br>As systems migrate, orchestrates handling of security controls with BCM Managed Security Service Provider (MSSP) which monitors all BCM systems for threats/attacks which are detected.
<br>Performs other job-related duties as assigned.
<br>Minimum Qualifications
<br>Bachelor's degree in a related field. Four years of relevant experience may substitute for degree requirement.
<br>Four years of relevant experience.
<br>Preferred Qualifications and Skills
<br>GIAC Security Essentials (GSEC), CISM — ISACA Certified Information Security Manager, CISSP — (ISC)²
<br>Experience in IT architecture, controls authoring/auditing, vulnerability management, red/blue teaming.
<br>Experience working across matrixed teams.
<br>Familiarity with formal project management structures.
<br>Familiarity with regulatory standards HIPAA, FERPA, GLBA, and GDPR.
<br>Additionally, advanced Excel and/or basic Power BI skills.
<br><br>
<b>Work Authorization Requirement:</b><br>
This position is not eligible for visa sponsorship. Candidates must be legally authorized to work in the United States at the time of application and throughout the duration of employment.
<br><br>
Baylor College of Medicine is an Equal Opportunity/Affirmative Action/Equal Access Employer.
<br><br>
<b>Requisition ID:</b> 24633

Manager, IT Infrastructure and Systems (Security)

General Dynamics Information Technology

<div></div><div><div><div>Clearance Level
<div>Top Secret</div>
</div><div></div><div>Category
<div>Network and Telecommunications</div>
</div><div></div><div>Location
<div>Not Applicable, Saudi Arabia</div>
<i>(</i><i>Onsite Workplace</i><i>)</i>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Communication</p>
</div><div><p>Communications Security (COMSEC)</p>
</div><div><p>Telecommunications</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ220596</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>None</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Regular</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<p></p><div><div>Transform technology into opportunity as a COMSEC/EKMS Manager with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you&rsquo;ll be at the forefront of innovation and play a meaningful part in improving how agencies operate.
<br>
<br>
At GDIT, people are our differentiator. As a COMSEC/EKMS Manager you will help ensure today is safe and tomorrow is smarter. Our work depends on a COMSEC/EKMS Manager joining our team to manage a classified COMSEC account in accordance with specified regulations.
<br>
<br>
HOW A COMSEC/EKMS MANAGER WILL MAKE AN IMPACT
<ul><li>Analyzes, administers, and maintains telecommunications systems
</li><li>Manage and supervise communications support personnel
</li><li>Monitors the operations of telecommunications systems and services of vendors
</li><li>Provides end-user training of telecommunications features and functionality
</li><li>Leverages Lead level &ldquo;hands on&rdquo; work experience in support of installations, repair, troubleshooting, and maintenance of communications systems.
</li><li>Applies technical knowledge to solve complex problems, understand the interrelationships of circuits, and be able to exercise independent judgment in performing tasks in support of communications systems.
</li></ul><br>
WHAT YOU&rsquo;LL NEED TO SUCCEED:
<ul><li>Required Experience: 1+ years of related experience</li></ul></div>
<ul><li>Certifications: Key Management Infrastructure (KMI), Security +
</li><li>Required Technical Skills: Generation and distribution of electronic keys from national and service level sources to the end-item communications security component (End Cryptographic Unit - ECU)
</li><li>Security Clearance Level: TOP SECRET
</li><li>Required Skills and Abilities:</li></ul>
<ul><li>Managing system databases to include compilation of systems reports and overall system performance</li></ul>
<ul><li>COMSEC (KMI and EKMS) standards</li></ul>
<div>- Generation and distribution of electronic keys from national and service level sources to the end-item communications security component (End Cryptographic Unit - ECU)
<ul><li>Location: On Customer Site
</li><li>US Citizenship Required - Top Secret</li></ul></div>
<p>CERTIFICATIONS:</p>
<p>Must meet the certification requirement on the SPIN-C or individual task order.</p>
<p>GENERAL EXPERIENCE:</p>
<p>Lead level &ldquo;hands on&rdquo; work experience in support of installations, repair, and troubleshooting or maintenance of communications systems or equipment. Must have the technical knowledge to solve complex problems, understand the interrelationships of circuits, and be able to exercise independent judgment in performing tasks in support of communications systems or equipment.</p>
<p>SPECIALIZED EXPERIENCE:</p>
<p>Lead level experience in the following:</p>
<ul><li>Managing system databases to include compilation of systems reports and overall system performance</li></ul>
<ul><li>Managing a Department of War (DOW) classified COMSEC account in accordance with National Security Agency (NSA) and specified service regulations</li></ul>
<ul><li>Managing and supervising communications support personnel</li></ul>
<ul><li>COMSEC (KMI and EKMS) standards</li></ul>
<ul><li>Generation and distribution of electronic keys from national and service level sources to the end-item communications security component (End Cryptographic Unit - ECU)</li></ul><br>
<p></p><div><br>
<br>
GDIT IS YOUR PLACE:
<ul><li>401K with company match
</li><li>Comprehensive health and wellness packages
</li><li>Internal mobility team dedicated to helping you own your career
</li><li>Professional growth opportunities including paid education and certifications
</li><li>Cutting-edge technology you can learn from
</li><li>Rest and recharge with paid vacation and holidays
</li></ul></div><p></p><p>#DefenseOCONUS</p>
</div></div><p></p><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>1 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
</div><p></p><div>Travel Required
<p>Less than 10%</p>
</div><div></div><div>Citizenship
<p>U.S. Citizenship Required</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely hourly rate for this position is between $39.11 - $0.00. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Total compensation for international positions varies by tax, social security, and immigration statuses, as well as location. Generally, an international assignment may include allowances, premium uplifts, and/or relocation or transportation benefits, above base salary range noted.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

COMSEC/EKMS Manager

<div></div><div><div><div>Clearance Level
<div>Top Secret/SCI</div>
</div><div></div><div>Category
<div>Cyber and IT Risk Management</div>
</div><div></div><div>Location
<div>Andrews AFB, Maryland</div>
<i>(</i><i>Onsite Workplace</i><i>)</i>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Information Assurance</p>
</div><div><p>Security Requirements</p>
</div><div><p>Vulnerability Assessments</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ222882</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>None</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Regular</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p>Please take this opportunity to join one of GDIT&rsquo;s fastest long-standing growing programs! US Battlefield Information Collection and Exploitation System eXtended (US BICES-X) is a cutting-edge program supporting DoW intelligence information sharing on current and emerging global threats to mission and coalition partners and emerging nations. With an internationally dispersed team supporting each combatant command, the US BICES-X team is in direct support of the war fighter and their missions. We are seeking an innovative and driven professional with a passion for solving dynamic challenges on a cross-functional, fast-paced team. You will be part of a high caliber team that is delivering a business-driven Enterprise Network to support BICES Global Enterprise Mission Support Services increasing performance, security, scalability, and stability while reducing costs and complexity resulting in increased supportability.</p>
<p>The Cybersecurity Manager provides advanced leadership, guidance, and oversight for a large-scale program supporting the government and U.S. Air Force. This role ensures the secure operation, authorization, and protection of complex information systems. The position requires deep expertise in DoW cybersecurity practices, the Risk Management Framework (RMF), security engineering, and continuous monitoring. The ideal candidate is a highly organized, self‑driven cybersecurity professional capable of working in a fast-paced, collaborative environment.</p>
<p></p><p><b>Key Responsibilities:</b></p>
<ul><li>Communicate the value of information technology security to stakeholders across all organizational levels.</li>
<li>Advise senior leadership on changes that impact cybersecurity posture, including evolving risks and compliance status.</li>
<li>Collaborate with a geographically dispersed team to coordinate cybersecurity inspections, tests, and reviews.</li>
<li>Develop, distribute, and maintain security-related plans, instructions, SOPs, and guidance for the operational environment.</li>
<li>Communicate security and compliance matters to government leaders, operations, and ISSO personnel.</li>
<li>Deliver status updates on cybersecurity metrics, risk indicators, compliance trends, and key results to senior government and GDIT leadership.</li>
<li>Oversee policy standards and ensure implementation strategies align with established cybersecurity requirements.</li>
<li>Ensure successful implementation of security requirements, policies, and procedures consistent with approved security baselines.</li>
<li>Provide remediation guidance to cybersecurity staff and ensure compliance with regulatory, contractual, and policy requirements.</li>
<li>Support updates to policies, procedures, and standards using NIST 800‑53, best practices, and emerging compliance needs.</li>
<li>Align IT security priorities with the broader cybersecurity strategy, including interpreting security requirements for new technologies.</li>
<li>Support acquisition activities in accordance with DoW/USAF supply‑chain‑risk‑management practices.</li>
<li>Assist with management of cybersecurity budgets, staffing, and contractual objectives.</li>
<li>Perform cybersecurity activities for a large program; support policy creation, dissemination, and auditing.</li>
<li>Support government ISSMs in preparing ATO, ATC, IATT, POA&amp;M, and other RMF/ISSO documentation as required.</li>
<li>Support development and execution of required ST&amp;V plans.</li>
<li>Produce ISSO materials, including project briefs and RMF action status for DoW IT packages.</li>
<li>Provide analysis of system architecture, security impact assessments, and risk mitigation strategies.</li>
<li>Provide security design oversight for build processes of servers, services, and endpoints.</li>
<li>Ensure compliance with hosting facility ATOs for dependent systems.</li>
<li>Implement and enforce strong cybersecurity and vulnerability management practices.</li>
<li>Conduct compliance and vulnerability audits using STIG Viewer, DISA SCAP, eMASSter, ACAS, and ESS Policy Auditor across Linux, Windows, Cisco, Juniper, VMware, and related technologies.</li>
<li>Execute Continuous Monitoring activities, including creation, tracking, and closure of POA&amp;Ms and Risk Acceptances.</li>
<li>Communicate threat information to government leadership and cybersecurity teams to support risk decisions.</li>
<li>Execute DoW RMF in accordance with DoW 8510, including security control validation and test coordination.</li>
<li>Coordinate with AFRL, USAF, and other agencies for audits, inspections, CVAs, ST&amp;Vs, and CCRI events as required.</li>
<li>Assess change requests (firewall, systems, networks) to determine organizational risk.</li>
<li>Maintain information system integrity through enforcement of organizational security policies and vulnerability monitoring.</li>
<li>Provide work leadership and mentorship to junior technical staff.</li>
<li>Maintain current knowledge of relevant security technologies.</li>
<li>Process support tickets using approved ITSM systems.</li>
<li>Complete other cybersecurity related tasks as outlined in 3.12 through 3.14 of the AFI 17-101 or as directed by the Cybersecurity Lead.</li>
</ul><p></p><p><b>Required Qualifications:</b></p>
<ul><li>10+ years of relevant cybersecurity experience.</li>
<li>Bachelor&rsquo;s degree (additional experience may be substituted).</li>
<li>Active TS/SCI clearance.</li>
<li>IAM Level III certification (CISSP, CISM, or GSLC).</li>
<li>Strong background in RMF and eMASS a must.</li>
<li>Strong understanding of cybersecurity principles, methodologies, and practices.</li>
<li>Through understanding of NIST, DoW, and AF Cybersecurity Orders and Directives.</li>
<li>Ability to work collaboratively within team‑oriented environments.</li>
<li>Excellent multitasking abilities in fast-paced environments.</li>
<li>Highly organized, self-directed, strong attention to detail.</li>
<li>Outstanding written and verbal communication skills.</li>
<li>High levels of integrity, adaptability, resilience, and initiative.</li>
</ul><p></p><p><b>Preferred Qualifications:</b></p>
<ul><li>Experience managing personnel (up to 10 staff).</li>
<li>Ability to prioritize multiple tasks and projects in dynamic, fast-paced environments.</li>
<li>Strong communication skills across individual, team, and leadership settings.</li>
<li>Additional role-specific certifications as required.</li>
<li>ITIL Foundations certification.</li>
</ul></div></div><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>10 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
</div><p></p><div>Travel Required
<p>10-25%</p>
</div><div></div><div>Citizenship
<p>U.S. Citizenship Required</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $124,093 - $165,600. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

Cybersecurity Manager/ISSO

The HEINEKEN Company

<div>
 <strong>
  Scope of the job
  <br/>
  <br/>
 </strong>
 Job purpose:
 <br/>
 <br/>
 Global Digital &amp; Technology (D&amp;T) has a worldwide responsibility for all IT processes, solutions and services. The aim is to further enhance HEINEKEN Global Functions by delivering common business driven solutions and services.
 <br/>
 <br/>
 The Global Information Security department is part of Global D&amp;T and has the overall responsibility of assuring that HEINEKEN&rsquo;s IT Risks are properly managed and information assets &amp; technology is properly secured.
 <br/>
 <br/>
 The Global Information Security teams include Cyber Defence Operations (CDO), Security Competence Centre (SCC) and Security Chapters (ERP, Enterprise Architecture, Data Privacy, etc) to design, implement, monitor, respond and assist with recovery activities against cyberattacks. They deliver deep security and risk management expertise to enable Product Teams and Global Functions to form a proper 1st Line of Defense (LoD) by building the right capabilities into their products (security by design) and support them.
 <br/>
 <br/>
 The Global Information Security Director is heading the department and responsible for the Global Information Security Strategy and orchestrating all security activities within this department and relevant stakeholders. He is part of the Global D&amp;T Executive Leadership Team.
 <br/>
 <br/>
 The
 <strong>
  Cyber Security Officer (CSO)
 </strong>
 is responsible for the management and implementation of the global Cyber Security Strategy based on the NIST Cyber Security Framework, to reduce the risk of a Cybersecurity incident according to the risk appetite of HEINEKEN and the Global Function, as well as to raise wider Global Function Cybersecurity awareness.
 <br/>
 <br/>
 <strong>
  Key responsibilities:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Security Operations
  </li>
  <li>
   Implement global security strategies to maintain the continuity of systems and update these based on local threats.
  </li>
 </ul>
 <ul>
  <li>
  </li>
  <ul>
   <li>
    Responsible to manage updates related to Global Function Security Standards that are required due to local legislative requirements, in consultation with the Global Information Security Specialist in line with HEINEKEN Security Strategy and supporting the HEINEKEN Business Strategy.
   </li>
   <li>
    Responsible for Global Function security approvals regarding global services (e.g. HeiNet), in order to maintain the highest level of security for the information and IT assets of the company.
   </li>
   <li>
    Assist the Global Information Security department in the design of controls/ standards and procedures that have broad implications, requiring systems integration of one or more technical platforms.
   </li>
   <li>
    Perform Risk reviews using the risk management procedure for all new Global Function programs/services to be deployed in the Global Function operational environment and veto programs which do not comply with HEINEKEN&rsquo;s security standards.
   </li>
   <li>
    Monitor internal and external information security and cyber security policy compliance, review and assess information security audits.
   </li>
  </ul>
 </ul>
 <br/>
 <br/>
 <ul>
  <li>
  </li>
  <ul>
   <li>
    Performs, as per the prescribed frequency the Information Security Maturity Assessment (ISMA), and ensures that all related evidence is available in support of the assessment.
   </li>
   <li>
    Monitor and ensure the timely closure of tasks related to audit and internal control issues raised by e.g. Global Audit, External Audit, etc.
   </li>
   <li>
    Develops and manages the Information Security action plan to address identified risks and non-compliances.
   </li>
  </ul>
 </ul>
 <br/>
 <br/>
 <ul>
  <li>
  </li>
  <ul>
   <li>
    Gains approval from the relevant management team on that action plan and its related budget.
   </li>
   <li>
    Monitors and reports on the execution of that actions plan, reporting to the Global D&amp;T Function management team and centrally to the Global Information Security Team.
   </li>
   <li>
    Analyse and challenge derogation requests regarding the ISP/TSP that Global Functions could have with a new solution or program, and communicate to the Global Information Security Team and Design Authority for approval in order to protect the HEINEKEN security environment.
   </li>
   <li>
    Drive resolution of cyber security incident responses and address security vulnerabilities.
   </li>
  </ul>
 </ul>
 <br/>
 <br/>
 <ul>
  <li>
  </li>
  <ul>
   <li>
    Perform/guide/drive digital investigations upon the request of Global Function/HR or Legal teams in case of breaches of HEINEKEN&rsquo;s Code of Business Conduct.
   </li>
   <li>
    If the Global Function faces any critical IT security incidents or breakout, he/she is responsible as the Global Function security incident lead to resolve in consultation with the Cyber Defense Operations Team (CDO), Global Function D&amp;T Directors and Global Function Line Managers.
   </li>
  </ul>
 </ul>
 <br/>
 <br/>
 <li>
 </li>
 <ul>
  <li>
   Identify and perform independent analysis to resolve complex first-time issues including the analysis of technical and economic feasibility of proposed security systems/ solutions. He/she is also responsible to assist the Global Information Security department for any IT technical audit (e.g. Ethical Hack) to any Global Function IT infrastructure or service that a 3rd Party offers to HEINEKEN with a valid and open contract to ensure that security policies are in place.
  </li>
  <li>
   Advises Global Function teams for security requirements (e.g. Patching, Anti-Virus, Vulnerability Management, etc).
  </li>
  <li>
   Security Awareness
  </li>
  <li>
   Drive training campaigns on cyber security awareness according to the global security awareness program and based on the Global Function reality.
  </li>
  <li>
   Security Strategy
  </li>
  <li>
   Responsible for identifying potential risks and recommendations on how to prevent and/or avoid that risk within the Global Function.
  </li>
  <li>
   Collaborate with the Global Information Security Specialist to understand and develop further the controls and processes required to improve information security.
  </li>
  <li>
   Innovation
  </li>
  <li>
   Accelerates and Drives implementation of new Security strategies and standards from global D&amp;T towards the HEINEKEN Global Functions
  </li>
  <li>
   Provide security expertise across multiple technical platforms to various Global Function stakeholders in all phases of solutions development (Ideation, Design, build, test and deploy) and Operations.
   <br/>
   <br/>
  </li>
 </ul>
 Budget responsibilities :
 <br/>
 <br/>
 Assigned to Global Function D&amp;T Manager.
 <br/>
 <br/>
 Number of direct reports:
 <br/>
 <br/>
 None
 <br/>
 <br/>
 <ul>
  <li>
   Position profile
   <br/>
   <br/>
  </li>
 </ul>
 Qualifications:
 <br/>
 <br/>
 Bachelor or Master degree in business information technology or a related field
 <br/>
 <br/>
 Possesses relevant certifications, e.g. CISSP / CCSP / CISM / CISA / CRISC
 <br/>
 <br/>
 Experience / skills required:
 <br/>
 <br/>
 <ul>
  <li>
   5+ years of working in the cyber security field and previous experience working as a cyber-security officer or manager.
  </li>
  <li>
   French is a must and preferable.
  </li>
  <li>
   Has worked with relevant market standards such as NIST, ISO 27001, COBIT and relevant laws and regulations such as privacy laws.
  </li>
  <li>
   Experience in handling security incidents.
  </li>
  <li>
   Proven ability to dynamically assess risks, threats &amp; threat actors.
  </li>
  <li>
   Able to work in a cross functional environment; preferably a background in the FMCG industry.
  </li>
  <li>
   Sense of Business Urgency and safe-cautious mind to close critical gaps and reduce any security breach.
  </li>
  <li>
   Ability to explain complex technical processes to business stakeholders.
  </li>
  <li>
   Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change.
  </li>
  <li>
   Ability to work and team with a multitude of different people and different cultures (as appropriate).
  </li>
  <li>
   Display professionalism, customer service attitude, attention to detail and quality.
  </li>
  <li>
   Possess strong interpersonal skills, relationship management and negotiation skills, strong verbal, and written communication skills.
  </li>
  <li>
   Develop self and others through continuous learning, sharing best practices, knowledge, and expertise.
  </li>
  <li>
   Excellent management and leadership skills.
   <br/>
   <br/>
  </li>
 </ul>
 Language(s):
 <br/>
 <br/>
 <ul>
  <li>
   Fluent English
  </li>
 </ul>
</div>


Cyber Security Officer - AME

Search 4215+ Security manager jobs near you this August. New roles added regularly across leading industries. Apply today.