Stefanini Group is hiring!
Stefanini is looking for a Senior Cyber Security & Infrastructure Lead - Remote; 1-2 days/month in the Cuyahoga Falls, OH 44223 corporate office
For quick Apply, please reach out to Maria Teresa Paje, call / email:
Job Title: Senior Cyber Security & Infrastructure Lead
Location: 3773 State Road, Cuyahoga Falls, OH 44223
(Remote; once or twice a month at the corporate office in Cuyahoga Falls, OH)
Certification required for cyber insurance CISSP
Qualifications:
Required10+ years of progressive information security or cybersecurity experience, including significant responsibility for enterprise security programs.Demonstrated experience leading cybersecurity strategy, governance, risk management, security operations, and incident response.Strong understanding of enterprise security architecture, network security, endpoint security, cloud security, identity and access management, and data protection.Experience implementing or operating cybersecurity programs aligned with the NIST Cybersecurity Framework or a comparable control framework.Demonstrated experience managing vulnerability remediation and cybersecurity risk across complex enterprise environments.Experience leading significant cybersecurity incidents and communicating effectively with both technical and executive audiences.Strong vendor-management and third-party risk-management capabilities.Demonstrated ability to operate effectively in an environment requiring both strategic leadership and hands-on problem solving.Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline, or equivalent relevant experience.
Responsibilities:
Cybersecurity Strategy & LeadershipOwn and execute the enterprise cybersecurity strategy and multi-year security roadmap.Serve as the organization's senior cybersecurity subject-matter expert and advisor to IT and business leadership.Translate technical cybersecurity risks into clear business impact, priorities, and investment recommendations.Establish measurable security objectives, key risk indicators, and executive-level reporting.Develop business cases and recommendations for security investments based on risk reduction, business value, and total cost of ownership.
Governance, Risk & ComplianceLead the continued development and maturity of the enterprise cybersecurity program using the NIST Cybersecurity Framework and other applicable standards and leading practices.Maintain and enforce cybersecurity policies, standards, procedures, and control frameworks.Own the enterprise cyber risk assessment process and maintain visibility into material cybersecurity risks and remediation plans.Partner with Legal, Internal Audit, technology teams, and business stakeholders to support regulatory, contractual, insurance, and audit requirements.
Security Operations & Incident ResponseProvide leadership and oversight for enterprise security monitoring, detection, investigation, containment, and response.Maintain and continuously improve cybersecurity incident response plans, playbooks, escalation procedures, and crisis-management processes.Lead the organization's response to significant cybersecurity incidents and coordinate activities across technology, leadership, Legal, communications, and third parties as necessary.
Security Architecture & EngineeringPartner with infrastructure, cloud, network, application, and enterprise architecture teams to embed security into technology design and operations.Provide security review and approval for significant technology initiatives and architectural changes.Establish and maintain appropriate security controls across identity and access management, endpoint security, networks, cloud environments, email, data protection, and enterprise applications.Promote secure configuration, least privilege, segmentation, encryption, and modern identity-security practices.Evaluate cybersecurity technologies and recommend changes based on capability, risk, cost, and operational effectiveness.
Security Awareness & CultureOwn the enterprise cybersecurity awareness and education program.Develop targeted security education for employees, technology teams, privileged users, and executives.Use phishing exercises, awareness metrics, incident trends, and other data to identify and address areas of human risk.Build a culture in which cybersecurity is viewed as a shared business responsibility rather than solely an IT function.
Vendor & Partner ManagementProvide security oversight for strategic cybersecurity vendors, managed service providers, and technology partners.Establish performance expectations and hold providers accountable for service quality, risk reduction, and contractual obligations.Participate in vendor selection, contract reviews, renewals, and security-related negotiations.Identify opportunities to simplify the security technology portfolio and improve value from cybersecurity investments.
Stefanini takes pride in hiring top talent and developing relationships with our future employees. Our talent acquisition teams will never make an offer of employment without having a phone conversation with you. Those face to face conversations will involve a description of the job for which you have applied. We also speak with you about the process including interviews and job offers.
About Stefanini Group
The Stefanini Group is a global provider of offshore, onshore and near shore outsourcing, IT digital consulting, systems integration, application, and strategic staffing services to Fortune 1000 enterprises around the world. Our presence is in countries like the Americas, Europe, Africa, and Asia, and more than 400 clients across a broad spectrum of markets, including financial services, manufacturing, telecommunications, chemical services, technology, public sector, and utilities. Stefanini is a CMM level 5, IT consulting company with a global presence. We are CMM Level 5 company.
#LI-MP1
#LI-REMOTE
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
- Dice Id: 10106616
- Position Id: 64617
- Posted 9 days ago
Never miss an opportunity! Create an alert based on the job you applied for.
