Jobs
>
Lansing

    Director of Cyber Security - Lansing, United States - CU Solutions Group

    CU Solutions Group
    CU Solutions Group Lansing, United States

    3 weeks ago

    Default job background
    Description
    Job Type

    Full-time

    Description

    This is a remote position which may require minimal travel as needed for business needs (conferences, team/board meetings, etc.)


    THE OPPORTUNITY


    The Director of Cyber Security (DCS) assumes a pivotal role in safeguarding the organization's information systems and data from potential security threats and breaches.

    With a focus on proactive risk management, the DCS develops, oversees, and coordinates the organization's cyber and digital risk management program and policies, ensuring alignment with industry standards and regulatory requirements.

    The DCS is responsible for identifying, evaluating, mitigating, and reporting digital and cyber risks, thereby fostering a culture of proactive risk mitigation within the organization.

    The DCS will protect the organization from emerging threats and promote best practices in cybersecurity.

    The DCS will collaborate with other departments to stay abreast of the latest cybersecurity trends and emerging threats.

    The DCS, in coordination with the internal IT department and CTO, will work towards enhancing security measures, promoting best practices, and conducting regular security assessments of vendors and solutions.


    THE WORK ITSELF


    Develop and maintainthe organization's digital risk and risk appetite framework and related processes to achieve the organization's short and long term strategic, technology and cybersecurity goals.

    This includes a strategic, comprehensive enterprise information security program to ensure the integrity, confidentiality, and availability of data.
    Participatein strategic and long-range planning and the development of project plans, policies, procedures, and budgetary projections.

    Provide regular and consistent reporting on the current status of the information security program to senior management and the board of directors.

    Create and maintain a comprehensive set of corporate information security policies and standards. Continuously monitor information security controls, Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and the technical landscape.

    Monitor the external threat environment for emerging threats and advise relevant stakeholders and the CEO on the appropriate course of action.

    Develop a compliance and audit program to ensure the organization is in compliance with applicable cybersecurity laws, standards, frameworks, and regulations, as well as SOC 2/3 requirements.

    This may include regulations such as GDPR, PCI DSS, as well as industry standards like ISO 27001.
    Implement effective Governance, Risk, and Compliance (GRC) controls and measures to protect systems and data.
    Conduct and/or risk assessments to identify and prioritize cyber risks based on potential impact and likelihood of occurrence. This involves analyzing the organization's IT infrastructure, systems, and processes to identify vulnerabilities and threats.

    Manage security incidents and events to protect corporate IT assets, company clients, including intellectual property, regulated data, and the company's reputation.

    Develop and maintain incident response plans to effectively respond to and mitigate cybersecurity incidents. This involves coordinating with internal teams and external stakeholders to contain and remediate security breaches.
    Work with business, internal IT, and third-party vendor teams to promote and adopt security best practices.
    Validate IT infrastructure and reference architectures for security best practices and recommend enhancements.

    Provide regular and consistent security awareness training and education to executive team on the relevant risks and changes in the cyber landscape.

    Review monthly penetration tests and make recommendations to the CEO and CTO.

    In coordination with the internal IT team, the DCS shall be involved in the management and coordination of audits with stakeholders and third parties.

    Provide regular reports and updates to senior management and stakeholders on the organization's cyber risk posture, including identified risks, mitigation efforts, and compliance status.

    Conduct Incident Response Drills that simulate a real-world cybersecurity incident and test the organization's preparedness, response procedures, and coordination among relevant teams and stakeholders.


    THE SKILLS YOU BRING
    The Must Haves...

    Experience working in cyber security strategy, enterprise risk management, or information security.
    Proven experience in monitoring and developing policies and procedures related to data or cyber security.
    Ability to assist in audit and artifact collection and management in support of organization's SOC 2/3 certifications.
    Experience with security technologies, including IDS/IPS, vulnerability testing, and firewalls is preferred.
    Must have extensive knowledge of privacy and data protection laws, regulations, and best practices.
    Enthusiasm, a collaborative work style, an inquisitive attitude, flexibility, creativity, a focus on excellence, and an overall "great-to-work-with" demeanor.
    Excellent written and oral communications and cross functional project management skills required.

    Must be a self-starter who is able to follow projects through to completion with little supervision and meet deadlines in a fast-paced environment.

    Comprehensive understanding of information security and enterprise risk management.
    Proficiency in computer programs (e.g. Microsoft Office, Excel, and PowerPoint).
    The Nice To Haves...

    Bachelor's degree in business, information technology, strategy, project management or related areas.
    Strong relationship builder and communicator with experience in leading diverse work teams.
    Experience working for a technology company that develops and sells software that stores and processes sensitive data is preferred.

    THE PERKS WE OFFER

    Competitive Pay :

    We know your value and we're not afraid to pay for it We offer a competitive total compensation plan including annual bonuses and a 5% contribution to your 401k.


    Time Off :

    Besides our competitive paid time off package, team members receive paid holidays and time off to volunteer for causes that are important to them.


    Benefits :
    We offer a comprehensive benefits package, including all the necessities such as medical, dental, and vision. Don't need health insurance? No problem An opt-out credit will be provided to you for waiving coverage.
    Opportunity for you to make an impact on the people we serve We're all about people helping people


    THE COMPANY ITSELF


    CUSG is a credit union service organization offering leading edge products and services in the areas of Martech, HR Performance and Financial Empowerment.

    Our company's dedication to the credit union mission is reflected through service excellence to credit union clients, credit union system partners and credit union leagues spanning 48 states.

    We are an equal opportunity employer committed to diversity in the workplace.

    We do not discriminate on the basis of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or any other protected status.

    We welcome and encourage applications from all qualified individuals.
    #J-18808-Ljbffr

  • TEKRRA1

    Cyber Security

    3 weeks ago


    TEKRRA1 Michigan City, United States

    Job Description · Job DescriptionShort Description: · Monitor and advise on information security issues related to the systems and workflow at an agency to ensure the internal IT security controls for an agency are appropriate and operating as intended. · Long Job Description: · ...

  • TEKRRA1

    Cyber Security

    3 weeks ago


    TEKRRA1 Michigan City, United States

    Job Description · Job DescriptionMonitor and advise on information security issues related to the systems and workflow at an agency to ensure the internal IT security controls for an agency are appropriate and operating as intended.Job Description: · Six (6) or more years experie ...

  • TEKRRA1

    Cyber Security

    2 weeks ago


    TEKRRA1 Michigan City, United States

    Job Description · Job DescriptionJob Description · Senior Full Stack Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static and Software Composition Analysis assessments. This position is not a member of the Secur ...

  • Tekfortune Inc

    Cyber Security

    3 weeks ago


    Tekfortune Inc Lansing, United States

    Tekfortune is a fast-growing consulting firm specialized in permanent, contract & project-based staffing services for worlds leading organizations in a broad range of industries. In this quickly changing economic landscape, virtual recruiting and remote work are critical for the ...

  • General Dynamics Land Systems

    Cyber Security

    3 weeks ago


    General Dynamics Land Systems Lansing, United States

    Job Description · About the Role: · This role collaborates with a team of OS/BSP and Embedded Software problem solvers to te st and evaluate Ground Vehicle Combat systems for operating within internal and external Tactical Network Domains. Perform SE Linux analysis on cross-dom ...

  • Syntricate Technologies

    Cyber Security

    3 weeks ago


    Syntricate Technologies Dimondale, United States

    Requisition Name :IT Security Analyst 3 · Location: Dimondale, MI · Duration : 12 + Months · Hybrid · Job Description :- · • 6+ Years' experience with IT security and auditing. · • EXPERT knowledge around NIST Controls and ability to perform risk assessments. · • bility ...


  • Stack Cybersecurity Lansing, United States

    Are you passionate about safeguarding critical systems and data from cyber threats? STACK Cybersecurity, a Managed Security Service Provider (MSSP) is seeking a talented Cybersecurity Engineer to join our team. As a key member of our MSSP, you'll play a vital role in maintaining ...

  • Novalink Solutions

    Cyber Security

    4 weeks ago


    Novalink Solutions Dimondale, United States

    Job Description · The IT Business Analyst performs a complete range of assignments supporting the business and technical needs within the Cybersecurity and Infrastructure Protection area. The position performs a range of items including, but not limited to, business needs analys ...


  • Brooksource Lansing, United States

    Job Description: As a Security Engineer specializing in SIEM (Security Information and Event Management) and Splunk, you will play a crucial role in safeguarding our organization's digital assets and ensuring the integrity of our IT infrastructure. Your primary responsibilities w ...


  • TEKRRA1 Michigan City, United States

    Job Description · Job DescriptionThis role is on the CIP Data Analytics Program (CDAP) Team which is responsible for producing a variety of processes, applications, and reports to support DTMB - Cybersecurity & Infrastructure Protection. The CDAP Team deliverables support data mi ...

  • Syntricate Technologies Inc

    Cyber Security

    1 week ago


    Syntricate Technologies Inc Dimondale, United States

    Requisition Name : IT Security Analyst 3 · Location: Dimondale, MI · Duration : 12 + Months · Hybrid · Job Description :- · • 6+ Years' experience with IT security and auditing. · • EXPERT knowledge around NIST Controls and ability to perform risk assessments. · • Ability t ...


  • Argus Cyber Security Ltd. Lansing, United States

    Who are we? · Argus Cyber Security is a global leader in the automotive cybersecurity industry. We protect drivers and manufacturers from cyber-attacks on their vehicles. We use top-notch technology and have several products for inside and outside the car. Our growing team is bui ...


  • HRU Inc Technical Resources Lansing, United States

    Cyber Security - Senior Software Engineer · About the Role: · This Contractor role collaborates with a team of OS/BSP and Embedded Software problem solvers to test and evaluate Ground Vehicle Combat systems for operating within internal and external Tactical Network Domains. Pe ...

  • Novalink Solutions

    Cyber Security

    1 week ago


    Novalink Solutions Dimondale, United States

    Job DescriptionThe IT Business Analyst performs a complete range of assignments supporting the business and technical needs within the Cybersecurity and Infrastructure Protection area. The position performs a range of items including, but not limited to, business needs analysis, ...


  • Evolutyz Corp Okemos, United States

    Hybrid role at Okemos, MI. Locals preferred. · 8+ experience in information security or system administration. · Experience in information security principles and practices, intrusion detection systems, installation, configuration, monitoring and response to security systems, sec ...

  • InterSources Inc.

    IT Security Analyst 3

    16 hours ago


    InterSources Inc. Lansing, United States

    Top Skills & Years of Experience Required 3-5 years' experience for skills below: · Knowledge of Cyber Security · NIST 800-53 · Follow the IT security technical architecture design methodology and best practices. · External Vendor contact/Communication skills · Microsoft SharePoi ...


  • InsideHigherEd East Lansing, United States

    Job no: 886727 · Work type: Faculty/Academic Staff · Major Administrative Unit / College: College Of Social Science · Department: Criminal Justice · Sub Area: FAS- Fac./Acad Staff · Salary: Salary Commensurate with Experience · Location: East Lansing · Categories: Education/Trai ...


  • ACRISURE Lansing, United States Full time

    About Acrisure · : Acrisure is a global Fintech leader that combines the best of humans and high tech to offer multiple financial products and services to millions of businesses and individual clients. We connect clients to solutions that help them protect and grow what matters, ...


  • Re:Build Manufacturing Lansing, United States

    ABOUT Re:Car · Re:Car, a subsidiary of Re:Build Manufacturing, is a new company that is exploring development in the electric vehicle space. · Who we are looking for: · Re:Car is adding a System Security Director to develop, deploy, and implement security policies, standards, ...


  • Ankura Lansing, United States

    Location field must contain 'city, state' or a zip code to perform a radius search (e.g., · Denver, CO · or · City and state must be separated by a comma followed by a space (e.g., · Houston, TX ) · Ankura · Senior Managing Director, Data & Technology, Cybersecurity Risk Ad ...