Cybersecurity Analyst

Cybersecurity Program Manager / Analyst

Job Summary:

We are seeking a highly skilled and proactive Cybersecurity Program Manager / Analyst to protect our organization’s digital assets, infrastructure, and data from cyber threats. This individual will be responsible for identifying assessing our threat landscape, identifying gaps, developing technology roadmaps, writing policies/procedures, and deploying cyber capabilities to continuously monitoring systems, identifying vulnerabilities, responding to security incidents, and implementing security policies to maintain compliance with industry standards. The ideal candidate will stay ahead of emerging threats and ensure that all cybersecurity measures align with business objectives.

Key Responsibilities:

• Threat Management and Monitoring
• Monitor networks, systems, and applications for suspicious activity.
• Identify, analyze, and mitigate potential cyber threats and vulnerabilities.
• Conduct penetration testing and vulnerability assessments to assess system weaknesses.
• Incident Response and Recovery
• Lead incident response efforts, including investigation, containment, and remediation.
• Develop and update incident response playbooks and workflows.
• Perform forensic analysis during and after incidents to identify root causes.
• Security Policy Development and Compliance
• Develop and enforce security policies, procedures, and standards.
• Ensure compliance with industry regulations (e.g., GDPR, CCPA, NIST, CMMC, ISO 27001).
• Support security audits and maintain required documentation.
• Risk Assessment and Mitigation
• Conduct risk assessments to evaluate the impact of emerging technologies and third-party services.
• Implement security controls to mitigate identified risks and reduce the attack surface.
• Policies, Training and Awareness
• Determine and draft written policies as needed.
• Provide cybersecurity training and awareness programs for employees.
• Collaborate with other departments to promote secure practices across the organization.
• Security Tools and Technology Management
• Configure, maintain, and optimize security tools (e.g., firewalls, SIEM, IDS/IPS, endpoint protection).
• Stay updated on the latest cybersecurity technologies and trends.
• Evaluate and recommend new security solutions as needed.
• IoT segregation practices

Qualifications and Skills:

• Educational Requirements:
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field. Master’s degree is desirable. (Relevant experience may substitute for education.)
• Certifications (Preferred):
• CompTIA Security+, CEH (Certified Ethical Hacker), CISSP, CISM, or equivalent.
• Experience with frameworks such as NIST, ISO 27001, or CIS Controls and maturing organizational capabilities.
• PMP are highly desirable.
• Technical Skills:
• Proficiency in security tools (e.g., SIEM platforms, IDS/IPS, firewalls, antivirus software, EDR).
• Strong understanding of networking, system administration, and cloud security (AWS, Azure, etc.).
• Hands-on experience with penetration testing and threat intelligence platforms.
• Soft Skills:
• Analytical and problem-solving skills, marked by critical thinking and sound judgment.
• Excellent written and verbal communication skills, including the ability to convey complex information clearly and effectively to both technical and non-technical audiences across all organizational levels.
• Experienced in leading discussions and building solid, trustworthy relationships with executive leaders and various business stakeholders by building rapport, trust, and confidence towards internal/external audit.
• Ability to work independently and collaborate effectively in a team environment.

Experience:

• 7-10 years of experience in cybersecurity or a related field.
• A proven track record of creating multi-year technology roadmaps and successfully leading and managing complex global projects to realize business results.
• Proven ability to work cross functionally (with other IT Teams, Legal, HR and etc.) and to manage external vendor partners.
• Prior experience in a security operations center (SOC) or incident response team is a plus.
• Working in Manufacturing environments on a global scale.