Cyber Strategy & Management Manager

Job description

As a Cyber Strategy & Management Manager, you will get the opportunity to grow and contribute to our clients' business needs by applying a collection of information and cybersecurity capabilities, including security and privacy, strategy, governance, IT risk, security testing, technology implementation/operations, cybercrime and breach response for the Cybers & Privacy Practice – all with the resources, environment, and support to help you excel. From day one, you’ll be empowered by the greater Cyber & Risk team to help clients make the moves that will help them achieve their vision and help you achieve more, confidently. Your day-to-day may include: - Manage, lead, and perform cybersecurity assessments consisting of cybersecurity capability assessments, cyber threat and risk assessments, network and security architecture reviews, compliance and regulatory assessments, and system configuration reviews. - Support evaluating and establishing organizational cybersecurity strategies and cybersecurity programs. - Develop strategic recommendations and consultative guidance to clients to help mature their cybersecurity programs, technology, processes and capabilities. - Manage assigned client engagements from start to finish, which includes engagement planning, fieldwork execution and reporting. - Remain current and apply knowledge of cybersecurity trends and risks. - Communicate and collaborate externally with clients and internally with all levels of the organization to successfully accomplish objectives portraying knowledge and confidence. - Proactively interact with key client management to gather information, resolve problems, and make recommendations for improvements. - Develop and manage client relationships with the intention to exceed client expectations. - Adhere to the highest degree of professional standards and strict client confidentiality. - Participate in professional development activities and training sessions on regular basis. - Other duties as assigned. You have the following technical skills and qualifications: - Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field is required - Minimum 5 years of related cybersecurity experience in a similar consulting practice or function - CISSP, CISM, GIAC (e.g., GSEC, GCIH, GISP, etc.), cloud security (e.g., AZ-500, AWS Certified Security, Google Cloud Professional Architect / Security Engineer) or other related certifications required - Reviewing security architecture deployments and assessing and/or implementing secure configurations for network and infrastructure components (including both on-premises and cloud environments). - Assessing Governance, Risk and Compliance programs, perform benchmark reviews, align with industry leading standards and develop target state vision and roadmap. - Performing cybersecurity threat and risk assessments. - Supporting cybersecurity program remediation activities. - Supporting cybersecurity compliance and regulatory remediation workstreams. - Assessing and/or implementing security solutions and controls across both on-premises and cloud network environments. - Strong project management skills and the ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment. - Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships - Strong professional verbal and written skill - Leading and managing one or more of the overarching areas below: - Assessing cybersecurity programs and capabilities against industry leading frameworks (e.g., NIST CSF, CRI Profile) and compliance and regulatory requirements. - Working knowledge of cybersecurity industry leading practices and frameworks, such as NIST CSF, CRI Profile, ISO 27001/2, NYS DFS 500, PCI-DSS, CIS Controls, CIS Benchmarks. - Excellent analytical, organizational and project management skills - Can travel as needed The base salary range for this position is between $161,920 - $202,400. Placement within the pay range is at Grant Thornton’s discretion, and it is based on multiple factors, including but not limited to, job -related knowledge/skills, experience, business needs, progression within the role, geographic location, and internal equity. At Grant Thornton, compensation decisions are dependent upon the facts and circumstances of each position and candidate.