Cybersecurity Program Manager

🕒 il y a 9 jours

🐻 Alaska, Idaho, +1 états de plus – Distant

🐻 Alaska – Remote 🥔 Idaho – Remote ☕ Washington – Remote

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Alaska Power & Telephone Company

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 1957

⚡ Énergie

📡 Télécommunications

💰 €33 017 636 Grant - Alaska Power and Telephone en 2022-09

Energy • Telecommunications

La société Alaska Power & Telephone (AP&T) est une entreprise appartenant à ses employés, fournissant de l'électricité, de l'Internet haut débit et des services de téléphonie fixe à plus de 40 communautés isolées en Alaska, couvrant 1 100 miles linéaires depuis 1957. AP&T exploite des réseaux de fibre optique et de micro-ondes offrant jusqu'à 2,5 Gbps aux foyers et entreprises, et génère environ 75% de son énergie à partir de l'hydroélectricité renouvelable, soutenant des initiatives durables comme les pompes à chaleur et l'électrification des véhicules. La société offre des outils pour les clients (SmartHub), webcams en direct, signalement des pannes et services aux entreprises, et investit activement dans des programmes communautaires locaux et des incitations énergétiques.

Description

• Maintain, administer, and continuously improve AP&T's cybersecurity program. • Develop, update, and maintain cybersecurity policies, procedures, standards, and supporting documentation. • Track cybersecurity initiatives, remediation efforts, and program objectives. • Support alignment with recognized frameworks and best practices, including NIST Cybersecurity Framework (CSF), CIS Controls, and CISA Cybersecurity Performance Goals. • Prepare reports, metrics, and risk summaries for leadership. • Monitor security alerts, events, and system activity across the organization's technology environment. • Investigate and respond to cybersecurity incidents and suspicious activity. • Maintain secure configurations and cybersecurity tools. • Coordinate with internal teams and external vendors to address identified security concerns. • Support endpoint, network, email, and cloud security initiatives. • Conduct and coordinate vulnerability scanning activities. • Analyze findings and prioritize remediation based on business risk. • Track corrective actions through completion. • Monitor patch management and system hardening efforts. • Participate in external security assessments, penetration testing, and remediation planning. • Administer and oversee access control processes. • Support privileged access management and least-privilege security practices. • Manage multifactor authentication (MFA) and identity security controls. • Conduct user access reviews and ensure appropriate account management practices. • Maintain incident response plans, procedures, and supporting documentation. • Coordinate cybersecurity event response activities. • Facilitate incident response exercises and tabletop simulations. • Support disaster recovery, business continuity, and backup validation activities. • Assist in post-incident reviews and corrective action planning. • Identify, assess, document, and track cybersecurity risks. • Support audits, compliance reviews, and cybersecurity assessments. • Review third-party and vendor cybersecurity practices. • Assist with cyber insurance submissions, questionnaires, and related requirements. • Maintain evidence and documentation supporting compliance activities. • Support cybersecurity practices across information technology, telecommunications, and operational technology environments. • Assist in securing distributed systems supporting utility and broadband operations. • Coordinate security efforts involving critical infrastructure and field operations technologies. • Support cybersecurity requirements for remote and rural operational environments. • Lead employee cybersecurity awareness and education efforts. • Coordinate phishing awareness campaigns and training activities. • Promote cybersecurity best practices throughout the organization. • Foster a culture of shared responsibility for information security.

🎯 Exigences

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field; or Equivalent combination of education, training, certifications, and relevant professional experience. • Minimum of five (5) years of hands-on experience in information technology, systems administration, network administration, infrastructure management, cybersecurity, or related technical disciplines. • Minimum of three (3) years of cybersecurity-related experience. • Experience with: Security operations, Network security, System administration, Endpoint protection and endpoint detection and response (EDR), Identity and access management (IAM), Vulnerability management, Backup and recovery solutions, Incident response and investigations. • Experience developing policies, procedures, incident reports, risk assessments, and technical documentation. • Ability to communicate effectively with both technical and non-technical stakeholders. • Ability to manage sensitive and confidential information with discretion and sound judgment. • Proven ability to coordinate remediation efforts and drive issues to resolution. • Current cybersecurity certification preferred, including but not limited to: CompTIA Security+, CompTIA CySA+, ISC² SSCP, ISC² CISSP, ISACA CISM, GIAC GSEC, GIAC GCIH, GIAC GICSP, ISA/IEC 62443 Certification. • Equivalent industry-recognized cybersecurity certification. • Candidates with significant relevant experience who do not currently hold a certification may be considered but will be expected to obtain an approved certification within 6-12 months of hire. • Working knowledge of: NIST Cybersecurity Framework (NIST CSF), CIS Critical Security Controls, CISA Cybersecurity Performance Goals (CPGs), Security Operations Center (SOC) practices, Incident response lifecycle, Vulnerability management, Least privilege and access control, Multifactor authentication (MFA), Endpoint security, Email security, Security logging and monitoring, Backup and disaster recovery best practices.

🏖️ Avantages

• Employee-owned company through our ESOP program • Opportunity to secure critical infrastructure serving Alaska communities • Collaborative and mission-driven culture • Professional development and certification support • Competitive compensation and comprehensive benefits • Meaningful work with visible impact