SPECTRUM
JOB SCOPESpectrum is seeking an independent, passionate and experienced professional to lead the Spectrum Cybersecurity Risk and Design Risk Assessment Team. The position will provide thought leadership, technical guidance and overall team direction for all aspects of Risk Assessment across Charter Spectrum’s customer facing networks. The Ideal candidate will be a technically experienced innovative cybersecurity professional with the ability to build relationships in a fast paced diverse environment. This role will ensure that Spectrum’s Risk and Design program provides comprehensive risk assessment, triage, and actionable remediation plans at scale. The right individual will also manage a team of security engineers responsible for identifying, tracking, and driving to remediation all findings from the Risk and Threat Management organization. This position will have the opportunity to build an enterprise class Risk and Design organization. DUTIES AND RESPONSIBILITIES Manage a team of security engineers responsible for identifying, tracking, and driving to remediation all findings from the Risk and Threat Management organizationProvide leadership for the adoption of a NIST base risk management program to include knowledge and experience with the NIST 800 series standardsProvide thought leadership, technical guidance and overall team direction for all aspects of Risk and Design across Spectrum’s customer facing networks.Ensure that Spectrum’s Risk and Design program provides comprehensive risk assessment, triage, and actionable remediation plans at scale.Be and remain connected with industry trends and security events and apply that knowledge to accelerate and advance the Risk and Design programBuild relationships to champion adoption of the security and vendor risk assessment, risk exception, threat modeling, and security compliance programsManage a team of cybersecurity engineers to include hiring, performance management, and team buildingEstablish consistent industry standard processes, standards and guidelines for the Risk and Design, programsEstablish enterprise class KPI tracking and management to ensure consistent actionable reporting to all levels of the organizationDrive expansion and advancement of the program to ensure comprehensive identification of risk across all business unitsExpand program coverage depth by adding new tooling to the Risk and Design portfolioDevelop a centralized data consolidation and analysis system for all risk dataDevelop a communication plan for risk data and findings, leveraging a pull based model detailed by business unitWork with management to develop long term strategy, annual plan and tactical plan for the risk and design programExhibit exception written and verbal communication skillsBASIC / MINIMUM QUALIFICATIONSBachelor’s Degree in Information Systems Security, Cybersecurity, Business or related field and/or equivalent work experienceMinimum of eight (8) years of technology / engineering work experienceMinimum of eight (8) years’ experience in security operations, vulnerability management, or cyber security risk managementMinimum of five (5) years management and supervisory experience Minimum of four (4) years’ experience with project management, DB design and administration. ADDITIONAL JOB QUALIFICATIONS Exposure to a broad range of department and/or system analysis Ability to manage individuals and teams while managing the daily operations of the departmentMaintains knowledge to ensure compliance with Network Operations standards, policies and procedures.Expert-level understanding of risk assessment and management, vulnerability management, compliance, SDLC, application assessment, static code analysis, and penetration testing knowledge.Ability to perform duties in a very fast pace environment and ability to learn new technology quicklyAbility to read, write and speak the English language to communicate with employees, customers, suppliers, in person, on the phone, and by written communications in a clear, straight-forward, and professional mannerSkilled at working in a team environment as well as in cross functional team situationsStrong user of MS Office product suiteShould be able to be available on callMust be willing to work flexible schedules including evenings, weekends and holidaysPREFERRED QUALIFICATIONSExperience leading or providing daily management and operational support for a team of senior security engineersKnowledge and experience with NIST 800 series standardsIndustry and vendor specific security certifications and training (CISSP, GCTI, GCFA, etc.)Understanding of security related software applications and programmingKnowledge of project managementCISSP/GIAC security CertificationWORKING CONDITIONSOffice Environment Occasional travel as required ISE600-APO 300523 300523BR Here, employees don’t just have jobs, they build careers. That’s why we believe in offering a comprehensive pay and benefits package that rewards employees for their contributions to our success, supports all aspects of their well-being, and delivers real value at every stage of life.The pay for this position has a minimum of $128,500.00. The actual salary offer may be higher as we carefully consider a wide range of factors, including your skills, qualifications, experience and location. Also, certain positions are eligible for additional forms of compensation such as bonuses.