Position: Cyber Security Manager
Company: GeeksForLess
Category: Security
Experience required: 5y
English level: upper
Published: 2022-04-01T00:00:00+03:00

Working schedule:
With the overlap with the PST time zone

REPORTING STRUCTURE
• This role reports to the Director, Digital Mines
• There are no direct reports to this role
PRIMARY RESPONSIBILITIES
• Align actual operating risk with agreed business risk appetite
• Assess current state vs target state
• Build roadmap to achieve target state over a multi year, continuous improvement program
• Create, Change and Manage Controls
• Measure and track Control effectiveness over time
• Build, measure, manage and report controls for existing and new 3rd party service suppliers
• Partner with service suppliers for cybersecurity outsourcing services
• Utilise Identity and Role based access control for staff and business partners
• Manage and Respond to Cybersecurity incidents
• Educate the business through Training, Policies and Communications
• Operating a perimetries network facilitating service access
• Vulnerability Monitoring and Remediation
• Supporting and Building Centerra’s IT Strategy

SKILLS AND COMPETENCIES
• Communicating and Managing a Structured Framework
• Extensive use of varied Risk Management tools and frameworks
• Integrating leading Industry Security Frameworks into an industrial or mining business
• Cloud Service Security Architecture
• Strong working knowledge of the Microsoft Cloud & Infrastructure platforms including Microsoft AD, Azure AD, SAML
• PKI and Certificate Infrastructure
• Delivering Policy Development and Education
• A structured approach to balancing Access vs Control
• Clear methods of prioritising Vulnerability Management
• A demonstrated analytical and methodical approach
• Ability and willing to travel / work at remote mine sites as required

EXPERIENCE, QUALIFICATIONS & EDUCATION
• 3+ years in a Cybersecurity role
• 10+ years in IT
• Industry certifications highly valued
• Membership in industry / community cybersecurity groups and programs
• Mining or Industrial experience highly valued
• Demonstrated background in Risk Management
• Demonstrated experience in writing Policy and Controls