JOB SCOPE
Spectrum is seeking an independent, passionate and experienced professional to lead the Spectrum Cybersecurity Risk and Design Risk Assessment Team. The position will provide thought leadership, technical guidance and overall team direction for all aspects of Risk Assessment across Charter Spectrum's customer facing networks. The Ideal candidate will be a technically experienced innovative cybersecurity professional with the ability to build relationships in a fast paced diverse environment. This role will ensure that Spectrum's Risk and Design program provides comprehensive risk assessment, triage, and actionable remediation plans at scale. The right individual will also manage a team of security engineers responsible for identifying, tracking, and driving to remediation all findings from the Risk and Threat Management organization. This position will have the opportunity to build an enterprise class Risk and Design organization.
DUTIES AND RESPONSIBILITIES

• Manage a team of security engineers responsible for identifying, tracking, and driving to remediation all findings from the Risk and Threat Management organization
• Provide leadership for the adoption of a NIST base risk management program to include knowledge and experience with the NIST 800 series standards
• Provide thought leadership, technical guidance and overall team direction for all aspects of Risk and Design across Spectrum's customer facing networks.
• Ensure that Spectrum's Risk and Design program provides comprehensive risk assessment, triage, and actionable remediation plans at scale.
• Be and remain connected with industry trends and security events and apply that knowledge to accelerate and advance the Risk and Design program
• Build relationships to champion adoption of the security and vendor risk assessment, risk exception, threat modeling, and security compliance programs
• Manage a team of cybersecurity engineers to include hiring, performance management, and team building
• Establish consistent industry standard processes, standards and guidelines for the Risk and Design, programs
• Establish enterprise class KPI tracking and management to ensure consistent actionable reporting to all levels of the organization
• Drive expansion and advancement of the program to ensure comprehensive identification of risk across all business units
• Expand program coverage depth by adding new tooling to the Risk and Design portfolio
• Develop a centralized data consolidation and analysis system for all risk data
• Develop a communication plan for risk data and findings, leveraging a pull based model detailed by business unit
• Work with management to develop long term strategy, annual plan and tactical plan for the risk and design program
• Exhibit exception written and verbal communication skills

BASIC / MINIMUM QUALIFICATIONS

• Bachelor's Degree in Information Systems Security, Cybersecurity, Business or related field and/or equivalent work experience
• Minimum of eight (8) years of technology / engineering work experience
• Minimum of eight (8) years' experience in security operations, vulnerability management, or cyber security risk management
• Minimum of five (5) years management and supervisory experience
• Minimum of four (4) years' experience with project management, DB design and administration.

ADDITIONAL JOB QUALIFICATIONS

• Exposure to a broad range of department and/or system analysis
• Ability to manage individuals and teams while managing the daily operations of the department
• Maintains knowledge to ensure compliance with Network Operations standards, policies and procedures.
• Expert-level understanding of risk assessment and management, vulnerability management, compliance, SDLC, application assessment, static code analysis, and penetration testing knowledge.
• Ability to perform duties in a very fast pace environment and ability to learn new technology quickly
• Ability to read, write and speak the English language to communicate with employees, customers, suppliers, in person, on the phone, and by written communications in a clear, straight-forward, and professional manner
• Skilled at working in a team environment as well as in cross functional team situations
• Strong user of MS Office product suite
• Should be able to be available on call
• Must be willing to work flexible schedules including evenings, weekends and holidays

PREFERRED QUALIFICATIONS

• Experience leading or providing daily management and operational support for a team of senior security engineers
• Knowledge and experience with NIST 800 series standards
• Industry and vendor specific security certifications and training (CISSP, GCTI, GCFA, etc.)
• Understanding of security related software applications and programming
• Knowledge of project management
• CISSP/GIAC security Certification

WORKING CONDITIONS

• Office Environment
• Occasional travel as required

ISE600-APO 300523 300523BR
Here, employees don't just have jobs, they build careers. That's why we believe in offering a comprehensive pay and benefits package that rewards employees for their contributions to our success, supports all aspects of their well-being, and delivers real value at every stage of life.
The pay for this position has a minimum of $128,500.00. The actual salary offer may be higher as we carefully consider a wide range of factors, including your skills, qualifications, experience and location. Also, certain positions are eligible for additional forms of compensation such as bonuses.