VetJobs - The Leading Military Job Board

CYBERSERCURITY OPERATIONS MANAGER

ABOUT YOU:

Join our team as the Manager of Cybersecurity Operations, where you’ll take the lead in safeguarding our enterprise against evolving cyber threats. In this dynamic role, you’ll manage our cutting-edge cybersecurity technologies, oversee the MSSP, and spearhead incident response efforts. You’ll also drive endpoint and email security, enforce robust vulnerability management, and set security configuration standards. As a key player, you’ll develop streamlined security processes, provide expert recommendations to stakeholders, and stay ahead of the ever-changing cybersecurity landscape. Ready to make an impact and protect what matters most?

YOU HAVE:

• Passion. A deep passion for cybersecurity and protecting the enterprise from evolving threats.

• Technical skills. Expertise in managing cybersecurity operations, including endpoint security, threat and vulnerability management, incident response, and working with SOC MSSPs.

• Experience. At least 8 years of hands-on experience in cybersecurity operations management, product evaluations, solution planning, and managing security technologies. You’ve conducted vulnerability assessments, forensic analysis, and are skilled in using SIEM platforms.

• Education. A Bachelor's degree in Computer Science, Information Systems, Information Security, or a related field. Professional certifications such as CISSP, CISM, CCSP, GSEC, GCIA, or CEH are a strong plus.

• Strong understanding. In-depth knowledge of cybersecurity principles, best practices, and frameworks like NIST CSF, CIS, MITRE ATT&CK, and Cyber Kill Chain, with the ability to apply them in enterprise environments.

• Great communication skills. Ability to effectively collaborate with cross-functional teams, communicate best practices, and mentor your cybersecurity team.

• Attention to detail. Strong organizational and time management skills to ensure security processes and standards are meticulously followed.

• Leadership skills. Proven ability to guide, mentor, and develop a cybersecurity team while driving the implementation of technical security standards and delivering results.

• Proficiency. Experience with project management tools like JIRA and JSM, and familiarity with industry standards like NIST, ISO 27001, GDPR, HIPAA, and PCI DSS.

  YOU WILL:

  Manage Cybersecurity Operations Management (SOC)

• Manage the day-to-day cyber security operations including the investigation, containment and remediation of incidents escalated through the Managed Security Services Provider (MSSP).

• Manage the 24/7/365 Managed Security Services Provider.

• Manage and optimize SIEM solutions for log aggregation, correlation, and real-time security event monitoring.

• Develop runbooks corresponding to potential cyber security incidents, including integration of runbooks with external stakeholders and MSSP.

• Manage Security Operations Center (SOC) team, ensuring effective monitoring and response to security incidents.

• Provide consulting and mentorship to SOC team members, including training on incident response processes and technologies.

• Actively manage and lead the Incident Response activities and tabletop exercises.

  Own Cybersecurity Tools and Solutions Management

• Develop and manage security solutions, frameworks, and methodologies.

• Evaluate, select, implement, and maintain security tools to enhance the organization's security posture.

• Administer and manage security solutions such SIEM, EDR, FIM, eMail filtering, domain protection, vulnerability management tools and other application security operations capabilities.

• Collaborate with stakeholders to align security capability solutions with business requirements.

• Evaluate emerging security technologies and provide recommendations for their implementation.

• Manage, maintain and/or govern cybersecurity tools and systems used for protection, monitoring, detection, and incident response.

• Govern the management and configuration of cybersecurity related tools such as firewalls, IDS/IPS, VPN, NAC and other tools managed by the Infrastructure Team.

• Define and enforce policies around certificate key usage to ensure strong security.

• Monitor the effectiveness of security tools and make recommendations for improvements or changes as needed.

• Directly participate in the installation, configuration, and monitoring of new cyber security technologies.

• Participate in the development of cyber security policies, standards, and procedures.

• Remain current with emerging cyber security threats and advise relevant stakeholders on the appropriate course of action.

• Manage and develop cyber security operations metrics and reporting.

  Provide Threat and Vulnerability Management:

• Develop and execute vulnerability management programs to identify, prioritize, and remediate security vulnerabilities.

• Conduct regular assessments and vulnerability scans to identify and mitigate potential threats and vulnerabilities.

• Monitor threat intelligence sources and stay updated on the latest security vulnerabilities and attack vectors and provide recommendations for mitigating risks.

• Define, implement, and monitor secure system configurations and hardening standards for servers, network devices, and other critical infrastructure.

• Develop and enforce security policies, standards, and procedures for system hardening.

• Collaborate with system administrators to ensure secure configurations are implemented and maintained.

• Conduct regular evaluations to verify compliance with security hardening standards.

• Provide audit evidence for SOX, PCI, and other stakeholder assessments.

  Manage Team:

  Coach, mentor, and provide leadership to two direct reports.

  Lead all aspects of personnel management, including hiring, promotions, performance reviews, and disciplinary actions.

  Support the development of your team’s skills, address performance gaps, and ensure fair application of company policies in collaboration with HR.

  LOVE WHERE YOU WORK:

• We care about your health. We offer competitive healthcare (health, dental, vision, coverage) in addition to voluntary benefits including home and car insurance, pet insurance, flexible spending account, amongst many more.

• We invest in your future. Our 401K plan has immediate vesting, so you can start saving for retirement right away.

• We believe in flexibility. We provide hybrid work options.

• We want you to unplug when needed. We believe in taking your time off without guilt and offer accrued paid time off and company paid holidays. *For Washington residents, you will receive 13 vacation days, 8 paid sick leave, 8 company paid holidays, and family paid leave.

• We care about your development. We support tuition reimbursement after 6 months of service.

  APPLICATION DEADLINE: November 30, 2024

  ABOUT US:

  Jostens leads the student commemoration market and has been serving local communities for over 125 years. We work with thousands of K-12 schools, colleges and universities each year, and have the honor of partnering with beloved sports teams and esteemed organizations across the country. Our iconic products — like yearbooks, letter jackets, class jewelry and championship rings — keep meaningful traditions alive and inspire millions of people to celebrate their unique stories, milestone moments and biggest accomplishments every year. We have 13 first-class facilities across the globe, from North America to the Caribbean. Watch a short video about us here (https://f.io/HIAsH659) .

  ALL ABOUT TECHNOLOGY:

  Our Technology organization combines planning, analysis, and development in combination with both enterprise retail and manufacturing platforms as well as custom development using primarily Java, web services, and web application frameworks like ReactJS/NodeJS. The Technology organization manages priorities through a centralized quarterly planning in close collaborative with business decision-making and strategy, directly supporting leadership in Marketing, Sales, Digital & Operations. Delivery is managed through typically an agile, two-week scrum or Kanban methodology leveraging a suite of Atlassian products. The Technology teams are structured organizationally to focus on key platforms and the business units that they. Though the utilization of best-in-class technical software, such as AWS, Tableau, SAP BPC, Oracle EBS, Salesforce, & Microsoft 360, you will get to play a critical role in determining technology solutions that steer our business. Jostens allows for a hybrid work setting that focuses on creating professional and personal development. We can’t wait to show you what our Technology Team has to offer at Jostens!

  AMERICANS WITH DISABILITIES ACT (ADA):

  Jostens is committed to the full inclusion of all qualified individuals. If reasonable accommodation is required to fully participate in the job application or interview process, or to perform the essential functions of the position, please reach out to our HR team at recruiter@jostens.com or (952) 830-3399.

  Jostens is an Equal Opportunity Employer and complies with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply.

  California Privacy Policy: https://www.jostens.com/about/california-employee-privacy-policy