
Senior Manager - Cybersecurity
- Bangalore, Karnataka
- Permanent
- Full-time
- Define, prioritize, allocate resources, track, and provide status reporting of work assignments, projects, and programs. Provides overall resource/project management for department, including matching people to projects, obtaining needed resources, etc.
- Monitors changes in legislation and compliance standards that affect assigned areas of responsibility and proactively acts to update standards, best practices and architectures based on this information.
- Manages, coordinates, and evaluates the work of assigned cybersecurity department to ensure the security, confidentiality, integrity & availability of United’s systems, products, and services.
- Works with cross functional teams to develop, document and implement cybersecurity standards, best practices, and architectures.
- Coordinates remediation of non-compliant items to meet applicable compliance standards and best practices.
- Manages the development and implementation of cybersecurity strategies.
- Maintains relationships with internal and external audit agencies to facilitate execution of audits.
- Bachelor's degree in Computer Science, Engineering or Business Administration
- 3+ years of web or mobile development (ASP.NET, MVC, SQL, JavaScript…etc.)
- 9+ years of IT and business/industry work experience
- Strong and proven ability to communicate technical concepts to a non-technical audience and stakeholders
- Experience with threat modeling or other risk identification techniques, and risk management
- Experience managing teams to identify strategic and tactical risk
- Experience partnering and influencing cross functional teams to drive security improvements
- Experience driving prioritization of security risks/vulnerabilities and ensuring that they are properly understood by the business and fixed and/or mitigated
- Strong analytical and quantitative skills with the ability to use data and metrics to back up assumptions and recommendations and drive actions
- Excellent oral and written communication skills
- Demonstrated ability to convey complex technical subjects in a concise and direct manner
- Demonstrated problem solving, critical thinking, logical structuring skills and a willingness to learn and stretch outside of your comfort zone
- Demonstrated knowledge on threat landscape, security threat and vulnerability management, and security monitoring and analytics
- Must be legally authorized to work in India for any employer without sponsorship
- Must be fluent in English (written and spoken)
- Successful completion of interview required to meet job qualification
- Reliable, punctual attendance is an essential function of the position
- MS in Computer Science, Mathematics, Information Systems, or other related field
- One or more of the following:
- Certified Ethical Hacker (CEH)
- GIAC Security Essentials (GSEC)
- Certified Information Security Manager (CISM)
- Comp TIA Security +
- Certified Information Systems Security Professional (CISSP)
- Certified Information Systems Auditor (CISA)
- Systems Security Certified Practitioner (SSCP)
- CompTIA Advanced Security Practitioner (CASP+)
- Offensive Security Certified Professional (OSCP)
- AWS Solution Architect Pro., Networking, and Security Specializations
- Working knowledge and/or hands on experience with as many as possible of the following areas:
- Operating system & platform security
- Networking Security and an understanding of network and web related protocols
- Voice over IP and unified communication security
- Strong subject matter expertise in the fields of IT security and risk management
- Strong knowledge of IT infrastructure security best practices, procedures, and standards
- Experience with cloud native products and in-depth understanding microservice topologies and implementations
- Expertise in application development and dev-ops security technologies and integration
- Demonstrated ability to think strategically about business, product, and technical challenges
- Experience within the transformation of traditional data center security measures into industry adopted cloud technologies
- Proven ability to work with compliance frameworks and requirements
- Ability to work in a fast-paced and Agile development environment
- Experience providing training and mentorship
- Ability to perform manual security code reviews
- Ability to interpret dynamic/static analysis tools, and penetration test results