Sr. Specialist Threat Risk Assessment

July 28

Apply Now

Receive Emails with Similar Jobs

DJJ-The David J Joseph Company

WebsiteLinkedInAll Job Openings

Grow the Core, Expand Beyond, Live Our Culture

Scrap Metal Recycling • Scrap Metal Brokerage • Finance, Sell, Buy and Lease Railcars • steel • transportation

1001 - 5000

Description

• To provide senior level strategic and tactical guidance to the Director Business Application Resilience and the CISO in establishing a City-wide cyber program • To define, develop and support Threat Risk Assessments (TRA) and cyber security risks while engaging with teams across the organization • To provide subject matter expertise, strategic advice, senior level guidance and operational support in the identification of cyber risks • To collaborate with other segments of the organization to manage City-wide cyber initiatives • Conducts Threat Risk Assessment for assigned initiatives • Participates in the development and sustainment of the Threat Risk Assessment program • Identifies, evaluates and supports initiatives that integrate into the Threat Risk Assessment program • Develops and contributes to TRA and Risk Management standards and approaches to enable seamless and secure integrated solutions • Builds collaborative and productive working relationships across the organization to establish, maintain, and continuously improve cyber risk management capabilities

Requirements

• Post-secondary degree in Business or Technology or a related discipline • Over 8 years of senior level experience in Cyber Security and in conducting Threat Risk Assessments • Strong relevant Threat Risk Assessment experience in a fast paced environment • Keen understanding of the digital ecosystems and customer needs with a focus on applications and application integration • Subject Matter Expert, and strong experience in providing threat mitigation advisory and consultative support to clients • Solid understanding in emerging technologies • Extensive experience of applying security industry standards and best practices such as ISO 27001 and NIST standards • Extensive experience preparing comprehensive reports and presentations for all levels of an organization • Strong understanding of security risks, threats, and vulnerabilities and the judgment to assess and articulate risk effectively • Knowledge of architectural design and implementation methodologies including software, network and infrastructure • Knowledge of network and information security methods, standards, architectures, policies and procedures • Preferred Certifications (any in the list): CISSP, CCSP, CISA, CISM