Senior Manager, Cyber Security Control Center

Senior Manager, Cyber Security Control Center

Req number:

R8240

Employment type:

Full time

Worksite flexibility:

Onsite

Who we are

CAI is a global services firm with over 9,000 associates worldwide and a yearly revenue of $1.3 billion+. We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right—whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise.

Job Summary

As a Senior Manager, Cyber Security Control Center you will evaluate our client's current SOC organization, processes, and technology tools and rebuild/ optimize it.

Job Description

We are looking for a Senior Manager, Cyber Security Control Center to manage the deployment, ongoing tuning, configuration, and operation of managed detection and response (MDR) tools and services, endpoint detection solutions, software logging and scanning tools, and other cybersecurity solutions while overseeing security event, incident, and vulnerability assessment and remediation efforts. The Senior Manager, Cyber Security Control Center will evaluate our client's current SOC Organization, process and technology tools, making recommendations to optimize and rebuild. This position will be a full-time 4-6 month contract and onsite in the Chicago loop. There is no relocation for this position, local candidates only.

This position requires the incumbent to be onsite in Chicago onsite initially 5-days per week with the possibility of going hybrid after 3-months. 

Due to our end client, only US Citizens will be considered for this role.

What You’ll Do 

• Analyze our client's current state SOC organization, technology and operational process environment. Define process/ procedure, organizational gaps

• Define future state SOC organization (roles and responsibilities, current staff alignment, skills gaps), processes (event triage, playbook), and technology (note: the client does not want to implement new technology, but if there is a vision to eliminate redundancy and/or an opportunity to consolidate then there should be recommendations)

• Manage the deployment, ongoing tuning, configuration, and operation of managed detection and response (MDR) tools and services, endpoint detection solutions, software logging and scanning tools, and other cybersecurity solutions to ensure cybersecurity health 

• Oversee the assessment and remediation of all security events, incidents, and vulnerabilities identified by the security operations team 

• Collaborate with IT teams and business stakeholders to establish expectations, develop security strategies, build consensus on remediation plans, and facilitate implementation 

• Create, refine, test, and enforce cybersecurity policies and procedures to identify security gaps and remediation actions 

• Develop and maintain disaster recovery plans and coordinate organizational readiness for disruptive events and business continuity 

• Implement cybersecurity awareness and training programs that educate employees on recognizing, responding to, and reporting cybersecurity threats 

• Monitor emerging cybersecurity threats, vulnerabilities, industry best practices, and regulatory requirements to ensure compliance and continuous improvement 

• Provide expertise and guidance on security data analysis methodologies and collaborate with cross-functional teams to enhance detection and response capabilities 

• Recommend strategies to reduce security risks across cloud environments, on-premises infrastructure, servers, network devices, and endpoint systems 

• Review, update, communicate, and execute incident response plans while coordinating exercises and ensuring stakeholders understand their responsibilities 

What You'll Need 

Required: 

• Bachelor's degree in Information Technology, Engineering, Management Information Systems, or a related field or four years of equivalent experience in IT networking or cybersecurity in lieu of a degree 

• Eight years of experience in IT networking or cybersecurity including six years of experience as a security analyst, network engineer, or systems engineer 

• Two years of cybersecurity operations team leadership experience 

• Considerable knowledge of security event monitoring, analysis, triage, vulnerability scanning, asset management, and MDR/SIEM tools and processes 

• Considerable knowledge of PCs, servers, firewalls, TCP/IP, network administration tools, intrusion detection systems, anti-virus software, Active Directory, data encryption, and security best practices 

• Knowledge of cybersecurity frameworks and methodologies including NIST 800-53, ISO 27001, MITRE ATT&CK, and CIS Controls 

• Strong problem-solving skills with the ability to balance business requirements and cybersecurity risk 

• Strong program and project management skills 

• Strong verbal and written communication skills with the ability to engage effectively with vendors and stakeholders at all organizational levels 

• Strong organizational, analytical, and critical thinking skills to evaluate cybersecurity controls and recommend improvements 

• Ability to build and lead high-performing teams through clear direction, accountability, and results-driven leadership 

• Ability to evaluate cybersecurity control effectiveness, recommend security improvements, build consensus, and facilitate execution 

• Ability to prioritize and execute tasks in a high-pressure environment while balancing risk and business needs 

• Ability to collaborate effectively with IT teams, business users, and external partners to deliver secure technology solutions 

Preferred: 

• Experience standing up a SOC

• Understanding of the Microsoft Defender Stack and Sentinel

• CISM 

• CISSP 

• CompTIA Security+ 

Physical Demands 

• Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state and local standards 

• Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.

• Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor 

#LI-JH1

Reasonable accommodation statement

If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to application.accommodations@cai.io or (888) 824 – 8111.

EEO Statement

It is the policy of Computer Aid, Inc.(CAI) not to discriminate against any employee or applicant for employment because of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or because he or she is a protected veteran. It is also the policy of CAI to take affirmative action to employ and to advance in employment, all persons regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status, and to base all employment decisions only on valid job requirements. This policy shall apply to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including apprenticeship, at all levels of employment.

 

Employees and applicants of CAI will not be subject to harassment on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, genetic information, disability or because he or she is a protected veteran. Additionally, retaliation, including intimidation, threats, or coercion, because an employee or applicant has objected to discrimination, engaged or may engage in filing a complaint, assisted in a review, investigation, or hearing or have otherwise sought to obtain their legal rights under any Federal, State, or local EEO law is prohibited.

$150,000 - $160,000 per year

The pay range for this position is listed above. Exact compensation may vary based on several factors, including location, experience, and education. Benefit packages include medical, dental, and vision insurance, as well as 401k retirement account access. Employees in this role receive paid time off and may also be entitled to paid sick leave and/or other paid time off as provided by applicable law.