The Vice President, Cybersecurity will hold the responsibility for developing, implementing, and monitoring a strategic, comprehensive enterprise cybersecurity program. She/He will provide the vision and leadership necessary to manage the risk to the organization and will ensure business alignment, effective governance, system and product availability, integrity, and confidentiality. This position reports to CIO.
Lead the cybersecurity program - perform risk management to identify, contextualize, and mitigate cyber risks to the business.
Engage and laisse with partners across various business units on cybersecurity projects and initiatives to align controls with business risk appetite and capacity.
Oversee a Managed Security Services Provider (MSSP) and manage the vendor relationship to ensure delivery of services aligned with business requirements.
Manage the ongoing health, operations, and use of company cybersecurity technology stack. Must provide oversight as well as hands-on as a practitioner.
Coordinate and oversee ongoing external security assessments and penetration tests to include reporting and tracking of findings remediations.
Spearhead ongoing vulnerability management, risk contextualization, reporting, and tracking of open vulnerabilities across the enterprise.
Architect secure infrastructure solutions to solve business problems and to enable business processes while mitigating risk to the business.
Lead the team responsible for proactively uncovering digital vulnerabilities within our environment and ensuring information assets and technologies are adequately protected
Developing the long-term strategy, execute the strategy, and manage the teams responsible for the Vulnerability Management, Pen Testing
Determining the appropriate schedule and mix of external and internal vulnerability scans, manual security testing
Providing quality control and oversight for testing reports, presentations, and brief-outs
Provides the direction for VGLNG's data and cybersecurity protection and will oversee Technology governance and policies.
Provides strategic risk guidance for IT projects, including evaluation and recommendation of technical controls.
Educates leaders on appropriate cybersecurity risk and mitigation strategies
Collaborates with IT compliance team(s) as needed and coordinates the IT component of both internal and external audits, federal and state examinations to ensure cybersecurity programs are in compliance with relevant laws, regulations, and policies.
Develops, maintains, and publishes up-to-date cybersecurity policies, standards, and guidelines.
Oversees training and dissemination of cybersecurity policies and practices.
Evaluates new cybersecurity threats and IT trends and develops effective security controls.
Oversees development of cybersecurity awareness programs.
Develops and oversees effective disaster recovery policies and standards to align with company business continuity management program goals. Coordinates development of implementation plans and procedures to ensure business critical services are recovered in the event of disasters or other incidents, and provides direction, support, and in-house consulting in these areas.
Evaluates potential security breaches, coordinates response, and recommend corrective actions.
Supervise staff as assigned in the performance of the job duties.
Define and report on information security metrics.
Provides project management and leadership to staff and external resources in support of established goals and objectives, improved efficiencies, and problem resolution.
Ensures accomplishment of all objectives in accordance with VGLNG policies, procedures, and strategic direction, as well as regulatory standards governing VGLNG.
Maintains current knowledge of industry and regulatory trends and developments for the enterprise technology.
Performs other duties as assigned.
Qualifications:
Bachelor's degree from an accredited institution, with degree preferred in Computer Science or Information technology systems security or related field. Advanced degrees preferred
Minimum of five (5) years of experience in Cybersecurity
Minimum of five (5) years leading vulnerability management, penetration testing, and/or red team organizations
Minimum of five (5) years hands-on experience conducting vulnerability scans, penetration tests
Have experience in setting long-term strategy for technical cybersecurity
Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) Certification
Knowledge of Information technology infrastructure library (ITIL) (certification preferred) with respect to security administration and information technology governance in a multi- platform environment
Experience in establishing cybersecurity and risk metrics for reporting
Strong Emotional Intelligence with demonstrated sustained leadership in a large organization involving multiple stakeholders
Demonstrated management skills, e.g., budget development and administration, policy development and implementation, personnel administration, staff training and development.
Demonstrated ability to work with diverse people
Have executive-level written and verbal presentation skills
Have leadership abilities and adaptability when facing unique challenges encountered to effectively work with individuals in diverse cultures and business environments