JOB DESCRIPTION
The safety and security of CSC’s current and prospective employees, customers, and the communities we serve are our top priorities.
Due to coronavirus (COVID-19) concerns, we have transitioned to virtual interviews for the foreseeable future. We look forward to all upcoming video and phone interview conversations with our candidates.
We’re always in search of top talent to join the CSC family. If you’re looking for a career change, don’t hesitate to apply or reach out to us. We’ll have virtual interactions until we are able to resume in-person meetings.
Cyber Risk Manager
Wilmington, DE
As a Cyber Risk Manager, within our Enterprise Technology division, you will be responsible to establish a program which ensures risk is managed to an acceptable level across the organization.
Some of the things you’ll be doing as a Cyber Risk Manager with CSC …
● Lead an information security risk management program
● Maintain cyber security risk register against changing threat environment
● Evaluate independent assessments of the Information Security function
● Assess third-party vendor risk
● Establish repeatable metrics that effectively communicate cyber risk posture
● Develop information security policies and standards
● Develop company cyber security communications
● Implement an information security education, training, and awareness program.
● Coordinate and schedule required compliance training for employees
● Provide subject matter expertise on Information Security Governance Risk and Compliance (GRC)
What technical skills, experience, and qualifications do you need?
● Minimum 9 years of IT experience with 4 years of cyber security and risk management experience
● Able to convey risk management principles to all levels of the organization
● Experience writing policies, procedures, and controls in one or more standards/frameworks
● Experience independently leading successful cybersecurity governance, risk, and compliance projects
● Experience building and managing cross-organization processes
● Knowledge of application security, cloud security, data privacy and controls
● Knowledge of cyber threats and vulnerabilities
● Knowledge of information security frameworks such as NIST CSF, FFIEC, ISO 27001, CMMC
● Experience mentoring and building information security skills in others
● Experience working with technology teams, business leaders, customers, auditors, and third parties
● CISM, CISA, CISSP, GSEC certifications preferred or related work
● Excellent oral and written skills with a passion for documentation and process.
● Strong commitment to customer service and customer satisfaction
● Strong analytical and troubleshooting skills
● Ability to work in a fast paced, highly dynamic environment
