Senior Specialist, Cybersecurity

Job Detail

The Senior Specialist, Cybersecurity is responsible for protecting the organization's information systems and data from potential threats. This role involves developing, implementing, and managing advanced security protocols and technologies. The specialist will lead security initiatives, conduct in-depth risk assessments, and respond to complex security incidents, ensuring compliance with regulatory requirements. They also serve as a subject matter expert, mentoring junior team members and collaborating with cross-functional teams to integrate security best practices across the enterprise. You will need to: Perform security risk assessments, formulate and advise on a risk treatment plan. Review security testing reports (e.g. vulnerability assessment, penetration testing and secure code review) and work with application teams for remediation. Coordinate cybersecurity awareness activities (e.g. newsletters, trainings, phishing campaigns). Manage vendors to support cybersecurity operations using enterprise security solutions (e.g. onboarding of privileged accounts to PAM, implementing WAF for website protection, and reviewing firewall rules, etc.) Work closely with Infrastructure and End User Support teams to identify and address any risks and gaps in the infrastructure, endpoints, and application systems. Prepare and present the Cybersecurity Subcommittee meetings. Support vendor due-diligence process and help to guide overall third-party risk management efforts. Support both internal audit and external audits in the area of cybersecurity.