Role Purpose
To act as an enabler, linking with all SANS organization the new, ongoing, and prospective projects and the Cybersecurity practice. Embedding into Procurement, Development and Change Management, in order to identify when cybersecurity team needs to get involved, and with which specific teams within the set KPIs, agreed budgets and adopted policies and procedures.
Key Accountability Areas
Key Activities
Cybersecurity Transformation and enablement
- Act as an enabler for Cybersecurity with other business functions, by proactively contacting different departments, stakeholders, and project leaders, and raise awareness about how and when to engage the different services of Cybersecurity
- Prioritize the demands from the business to make the best use of Cybersecurity department resources: by checking on the available resources and capacity, different tasks will be prioritized, such as when to perform risk assessments, architecture discussions or technical security controls review. This role will work closely with Projects’ owners to schedule the different tasks they require, maximizing the optimal use of Cyber department.
- Develop cybersecurity demand management process to ensure all business demand captures and acts on effectively.
- Respond to relevant requests received from all stakeholders or representative of stakeholders related to cybersecurity, for investigation of all potential reporting issues.
- Support in cybersecurity risk assessment and business impact analysis for new business initiatives or major change.
- Perform continuous monitoring / review of the scheduled implementation and overall health and completion.
- Monitor Cybersecurity projects/initiatives budget and provide a briefing of the status to the Cyber Transformation Manager.
- Ensure that security requirements are injected in the initial phases of SANS procurement, Development and Change Management processes.
- Provide the procurement department with the technical recommendation to facilitate the vendor evaluation and selection process.
- Enforce security requirements within SANS change management process.
- Ensure that Cybersecurity requirements are met during the implementation phase.
- Support the Cyber Transformation Office team on Project management and additional tasks related to the Overall Cyber Strategy Program and Roadmap Execution.
Policies, Processes and Procedures
- Conduct day-to-day activities while ensuring compliance to policies and procedures
- Contribute to the identification of opportunities for continuous improvement of systems, processes taking into account leading practices, changes in business environment, cost reduction and productivity improvement
Knowledge and Experience
- Minimum of 6 years of relevant experience in cybersecurity and Information Technology.
Education and Certifications
- Bachelor’s degree in Computer Science, Engineering, Information Systems (or other relevant technical disciplines).
- Professional Security Management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials.
- PMP certificate is preferred.