IT BRM Cybersecurity

JOB DESCRIPTION:
This role supports divisional cybersecurity processes and works with business partners and stakeholders to apply cybersecurity requirements to their projects and processes.  This role will also work with divisional BRM’s and business stakeholders to proactively mitigate cybersecurity risk in the division. The Cybersecurity Manager will use their understanding of cybersecurity combined with critical thinking capabilities and analytical skills to provide operational support to the ADC Cybersecurity Office. The Cybersecurity Manager is a critical role in supporting the implementation of cybersecurity framework and controls through the ADC Cybersecurity Office.  You will be an effective communicator regardless of audience or medium, explaining complex security issues and articulating the threat model. In addition, you will be a sound decision-maker and rationalize between difficult choices on technical merit and real-world risk.

RESPONSIBILITIES:

Manage divisional exception request vetting and tracking and coordinate such requests with the business partners, documenting risks and remediation plans and presenting cases to the ADC Cybersecurity Officer for review 

• Identify and conduct assessments of cybersecurity risk based on existing procedures and recommend sound risk decisions
• Monitor for and handle the tactical specifics of cybersecurity signals, incidents, and events, following established processes
• Evolve Cybersecurity metrics and reporting to help drive strategy, create Cybersecurity dashboards and reporting, drive performance metrics and analysis, and partner with ADC Cybersecurity Officer on related planning
• Perform vulnerability assessments and manage vulnerability remediation within required SLA with division and enterprise parties
• Manage the tracking and handle the tactical execution of processes related to cybersecurity
• Support the creation of cybersecurity playbooks and collaborate with the business partners in adoption and process adaptation
• Participates in the creation of Cybersecurity Roadmaps
• Responsible for the documentation of cybersecurity requirements and controls in projects, initiatives, and processes
• Identify and evaluate business and technology risks related to cybersecurity
• Document processes, create templates, status reports, finish to completion

Position Accountability & Scope:

• Facilitates education and awareness of ADC cybersecurity processes and playbooks with divisional stakeholders
• Engages in collaborative activities related to cybersecurity with stakeholders from different areas
• Establish mechanisms to collect and report on divisional cyber threat intelligence
• Communicate status of projects and deliverables to internal and external clients timely and accurately
• Deliver services with excellence. Manage work to completion.
• Support business development efforts as requested by the Cybersecurity Officer
• Conduct relevant research, data analysis, and create reports, expert Excel reporting, and analysis
• Maintain responsibility for completion and accuracy of work products

EDUCATION AND EXPERIENCE:

• Bachelor’s Degree or equivalent experience
• Overall, 7-10 years of IT experience.
• Minimum of 3-5 years of experience in the IT/Healthcare/Medical Devices space
• Domain experience in Cybersecurity and Privacy (3-5 years)
• Familiarity with Cybersecurity Frameworks, including NIST, ISO207001, HITRUST, FEDRAMP, SOC2, and OWASP Top Ten
• Strong experience with metrics and reporting in Excel and PowerBI, query writing in Excel/SQL; aggregates multiple data sets from different data sources to create insight and display meaningful visuals.
• Ability to focus and present business value
• Build business relationships and fosters trust
• Prioritization of business issues
• Single-tasking and parallel streaming, combined to make progress to completion and meet time-demands
• Strong business acumen to understand business concerns, priorities, and goals
• Strong attention to detail
• Strong intrapersonal skills and ability to collaborate with a diverse set of stakeholders
• Ability to understand new material and subject matter quickly and absorb into work deliverables and/or client communication

Preferred Experience:

• Understanding of privacy practices including GDPR, CCPA, etc.

• Strong analytical and technical skills
• Strong writing, communication, and presentations skills
• Demonstrates the ability to facilitate and engage with all types of audiences
• Strategic thinking, goal-focused
• Reading the room, assertiveness and diplomacy, and the knowledge which to apply when
• Energetic self-starter
• Ability to listen, communicate and influence
• Foster and promote collaboration with cross-functional teams and leaders
• Integrity and honesty are key values.