Manager I, Cyber Security

Overview

To plan, supervise and direct the engineering functions within the Cybersecurity Technology Engineering (CTE) team. Collaborate with managers and supervisors within the CTE to define the strategic vision for the team. Provide leadership, guidance, and technical expertise to ensure appropriate security protocols are leveraged to protect NFCU's brand, data, and IT assets from cyber-based threats. Serve as subject matter expert regarding section functions, systems, and policies and procedures.

Responsibilities

• Oversee the architecture, engineering and operational efforts for solutions needed by the CTE team of Network Security engineers
• Manage the daily operations for firewalls, network access controls, and intrusion prevention systems
• Provide vision to ensure daily operations are managed efficiently
• Ensure a standardized approach to network security policy management
• Act as an escalation source for on-call engineers
• Oversee the assessment and review of current technology to identify key risk areas to ensure an adequate level of control is in place to address risks
• Oversee vulnerability and threat assessments, mitigation and reporting activities
• Identify and resolve operational and performance gaps and obstacles; recommend and implement changes and improvements
• Ensure that work quality, work methods, procedures, processes, and production statistics meet business goals and standards of member service
• Develop guidelines, standards, policies, procedures and other technical documentation
• Provide guidance and support to the Incident Response & Monitoring team in detecting, analyzing, containing, and eradicating malicious activity
• Maintain thorough knowledge of and ensure compliance with applicable federal and state laws, rules, regulations, NFCU policies and procedures, and service level agreements
• Research, gather and synthesize data; present conclusions and recommendations to management
• Monitor work environment and direct allocation of resources to ensure adequate staffing to meet production and member service standards
• Escalate operational and budget issues or impacts to services to management in a timely manner with appropriate information regarding risk and impact
• Perform other duties as assigned

• Minimum of 5 years of Experience as a Network Security Engineer (10 years preferred)
• Significant experience with Palo Alto and/or Checkpoint Firewalls
• Experience with Cisco ISE
• Significant progressively responsible experience in a large enterprise security operations center, or information technology operations, preferably in a large financial institution
• Expert knowledge of cyber/information security systems engineering lifecycle
• Advanced knowledge of network and host-based forensic methodologies
• Advanced knowledge of enterprise-grade security technologies and capabilities (e.g. SIEM, DLP, UEBA, firewall, web proxy, etc.)
• Advanced knowledge of current threat landscape, adversary tactics, techniques and procedures
• Advanced knowledge of information security programs, data security practices and procedures, including risk identification/assessment
• Significant experience supervising, guiding and mentoring professional staff
• Significant experience managing multiple priorities independently and/or in a team environment to achieve goals
• Significant experience working with all levels of staff, management, stakeholders, vendors
• Advanced skill exercising initiative and using good judgment to make sound decisions
• Advanced skill interacting with staff, management, vendors and members diplomatically and tactfully
• Advanced analytical thinking skills to include summarizing information and clearly identifying key elements, patterns, results or relationships
• Advanced research, analytical and problem solving skills
• Advanced verbal and written communication skills
• Advanced database, word processing, presentation, and spreadsheet software skills
• Advanced skill presenting findings, conclusions, alternatives and information clearly and concisely
• Advanced skill communicating complex technical concepts to non-technical audiences
• Advanced skill leading, guiding and mentoring professional staff
• Advanced skill producing desired results to achieve goals and objectives
• Advanced planning, organizational and time management skills
• Bachelor's degree in Information Technology, Engineering, or related field, or the equivalent combination of education, training and experience

• Experience in the financial sector
• Experience migrating layer four firewall policies to layer seven
• Working knowledge of NFCU's functions, philosophy, operations, systems, software, and organizational objectives
• GIAC , CEH, CISSP, Security+, or related Information Security certifications
• Professional Certification in one of the following- CCNP, CISSP, CCIE, PCNSE
• Significant experience in leading IT projects
• Demonstrated proficiency in establishing processes and procedures