Technical Security Manager

Stelle nicht auf LinkedIn

🕒 vor 16 Tagen

🇺🇸 Vereinigte Staaten – Remote

⏰ Vollzeit

🟡 Mittelstufe

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Cambium Learning Group

WebsiteLinkedInAlle Stellen

501 - 1000 Mitarbeiter

Gegründet 2009

📚 Bildung

🤖 Künstliche Intelligenz

Education • Artificial Intelligence

Die Cambium Learning Group ist ein Unternehmen, das sich darauf konzentriert, essenzielle Bildungslösungen durch eine Familie von Unternehmen bereitzustellen. Sie schaffen Erlebnisse, die darauf ausgelegt sind, Lehrkräften und Schülern zum Erfolg zu verhelfen, indem sie Technologie, einschließlich künstlicher Intelligenz und maschinellem Lernen, nutzen. Die Marken der Cambium Learning Group gehören zu den angesehensten im EdTech-Sektor und unterstützen bedeutsame Arbeit und Innovation im Bildungsbereich. Ihr Engagement spiegelt sich in ihrer Hingabe wider, jeden Lernmoment wertvoll und wirkungsvoll zu gestalten.

Beschreibung

• Maintain, mature, and take ownership of our program that ensures conformance to security standards. This includes but is not limited to conformance with ISO 27001, ISO 27018, ISO 42001, Privacy laws, ISO 9001, GovRAMP, FedRAMP, NIST 800, SOC, and CIS Top Controls. • Facilitate annual independent audits of our organization by third-party security and privacy experts. Create audit plan, co-ordinate with stakeholders, review reports and remediate audit findings. • Responsible for planning and managing multiple security improvement projects from requirements phase through deployment/implementation. • Managing document and record control processes and procedures, including maintaining accurate inventories and records of compliance/conformance artifacts • Responsible for our Security Awareness and related training programs. Maintains and improves processes, platforms and systems that support our training campaigns and content. Creates, monitors and reports on campaigns. • Supports business development by responding to requests for security and privacy information that is included in proposals for new business. • Performs security risk assessments of software acquisitions, technical services, business systems and new technologies. • Owns and administers a GRC tool to track security controls and current conformance status. Ensures that relevant security artifacts are recorded and updated. • Conducts enterprise risk assessment reviews and report out to senior management regarding security issues and metrics – both as an ongoing process and on an as-needed basis. • Assists in continual improvement by examining our current security posture and security practices, identifying risks or gaps, and recommending programs to address them. • Manages privacy risks including exposures created by cookies and APIs. Maintains Privacy policies and ensures compliance.

🎯 Anforderungen

• Bachelor’s Degree in Information Security, Cybersecurity, computer science, engineering, Information Systems or related technical field • Minimum 5 years hands-on experience in the information security field • Extensive and deep knowledge of security and privacy frameworks, standards, and industry best practices. • Knowledge of Privacy laws and principles such as GDPR, COPPA, and FERPA • Extensive and deep knowledge of tools and techniques used to protect against cybersecurity attacks and respond to incidents. • Information Security Certifications such as CISSP, GIAC, ISACA, AWS Security. PMP certification a plus. • Experience with GRC tools • Exceptional verbal and written communication skills to effectively and accurately communicate with a variety of teams ranging from highly detailed discussions with technical and subject matter experts to executive-level communications required for senior leaders and decisionmakers. • Demonstrated working experience with: Security and privacy standards such as ISO, GovRAMP, FedRAMP and/or other industry best practice frameworks. • Writing, developing, and maintaining official security and privacy-relevant records and documentation • Reducing organizational risk by conducting risk assessments, gap analysis, improvement plans and tracking associated corrective actions or POAMs to closure • Developing and executing project management plans for technical projects.

🏖️ Vorteile

• Health insurance • Paid time off • Retirement plans