Manager – Cybersecurity & Risk

Vaga não está no LinkedIn

🕒 Junho 4

Candidatar-se

Encontrar Vagas Remotas Similares

Receber Emails de Vagas Remotas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

SavATree

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 1985

👥 B2C

🤝 B2B

🏛️ Governo

B2C • B2B • Government

A SavATree é uma empresa licenciada e credenciada de cuidados com árvores, arbustos e gramados que oferece serviços de gestão e manutenção de paisagens residenciais, comerciais e municipais. A empresa oferece serviços como poda de árvores, cabos e escoramento, remoção, trituração de tocos, fertilização, tratamentos para doenças e pragas (incluindo opções orgânicas), cuidados com gramados (aeração, semeadura, fertilização), serviços de irrigação, programas de dissuasão de cervos, controle de carrapatos e insetos, iluminação de festas, resposta a emergências climáticas e consultoria profissional de arboristas certificados pela ISA para avaliações de risco, avaliações e planejamento de florestas urbanas. A SavATree enfatiza o diagnóstico baseado em ciência, a gestão ambiental e o serviço personalizado em filiais locais.

Descrição

• Serve as the enterprise cybersecurity lead responsible for cybersecurity operations and risk management across infrastructure, endpoints, identity, cloud, applications, data, and third-party environments. • Partner closely with Infrastructure & Operations to strengthen endpoint security, vulnerability management, patching, identity and access management, logging, monitoring, and incident detection and response capabilities. • Provide technical cybersecurity leadership across Microsoft, cloud, SaaS, and enterprise platforms to improve overall security posture. • Partner with enterprise application teams to ensure secure architecture, integrations, and data practices across core business platforms, including Microsoft technologies and enterprise applications. • Lead cybersecurity incident response coordination, tabletop exercises, root cause analysis, and remediation planning. • Evaluate emerging threats and recommend pragmatic, risk-based mitigation strategies aligned to business priorities. • Monitor and assess cybersecurity posture across internal and third-party environments. • Help define and mature enterprise cybersecurity capabilities, operating processes, and governance appropriate for a growing organization. • Develop and maintain cybersecurity policies, standards, procedures, and best practices. • Build and maintain a practical cybersecurity roadmap focused on risk reduction, resiliency, and operational effectiveness. • Establish cybersecurity metrics, scorecards, and reporting for IT leadership and executive stakeholders. • Conduct risk assessments and partner with teams to prioritize remediation activities. • Support security awareness and training initiatives. • Support enterprise cybersecurity governance practices, including access controls, vendor risk management, data protection, and security awareness. • Partner with stakeholders on cybersecurity-related audits, customer questionnaires, cyber insurance requirements, and compliance activities. • Help mature incident response, disaster recovery, and business continuity capabilities. • Establish practical, scalable controls appropriate for a fast-paced, growth-oriented organization. • Drive accountability, service quality, and measurable outcomes across third-party providers. • Evaluate cybersecurity tools and recommend solutions aligned to business needs and organizational maturity. • Establish a strong cybersecurity operating foundation and improve organizational resiliency through pragmatic controls and risk reduction.

🎯 Requisitos

• 7+ years of progressive cybersecurity experience with increasing responsibility. • Experience operating as a senior cybersecurity individual contributor or technical leader in a mid-sized enterprise environment. • Strong technical understanding across IAM, EDR, vulnerability management, SIEM, Microsoft Security, Azure security, infrastructure/network security, incident response, and security architecture. • Experience developing cybersecurity policies, standards, and procedures. • Experience managing third-party cybersecurity vendors and managed service providers. • Strong communication skills with the ability to explain technical risks in business-friendly language. • Experience in private equity-backed, multi-site, field-service, or distributed operations environments. • Experience supporting geographically dispersed or branch-based organizations. • Experience with Microsoft technologies including Azure, Microsoft 365, Defender, Intune, and Entra ID. • Relevant certifications such as CISSP, CISM, Security+, Azure Security Engineer, or similar.