Sr Manager Technology (Cybersecurity Architect experience required)

Company Overview:Our ingenuity fuels daily life. Together, we've forged some of the most trusted partnerships across the energy value chain to make what was once just an idea a reality: laying subsea infrastructure thousands of feet below sea level, installing platforms hundreds of miles from shore, using our expertise to design and build offshore wind infrastructure, and reshaping the onshore landscape to deliver the energy products the world needs safely and sustainably.For more than 100 years, we've been making the impossible possible. Today, we're driving the energy transition with more than 30,000 of the brightest minds across 54 countries.Job Overview:This role will help provide leadership for IT Cybersecurity. The Senior Manager Technology will be have situational awareness on threat actor attack tactics, techniques, and methods. Drive program level changes to ensure deployed technology can detect and defensing these risks. Assist with communicating and reporting to IT leadership as well as IT peers. Ensure existing technology deployments are adhering to best practice configurations, maintain operational health, and performance. Assist with or manage projects to update or deploy new technology as required. This is not a GRC role. It is a Cyber role requiring a passion and dedication to keep pace with the threat landscape.Key Tasks and Responsibilities:Maintain awareness of cybersecurity threats, events, tactics, techniques, and procedures (TTPs)Assist in the analysis, design and development of an Information Security roadmap aligned with business strategiesInform on strategy and product level roadmap around security technologies and practical implementationDefine requirements for the implementation of security technologiesPerform market evaluation of new tools and techniques to enhance the security postureReview, analyze, design, and advise on security controls, configurations, and implementations for IT projectsMonitor emerging technologies and identify opportunities for improving overall CybersecurityContinuously improve the integration and effectiveness of implemented technologiesAssist with the planning, testing, tracking, remediation for identified cybersecurity operations weaknessesWork with IT risk assessment function to ensure the proper security configurations and controls are implemented for IT projectsServe as an internal trusted advisor providing security services, advice on security, and assist with compensating control alternatives where security requirements cannot be metAssist with forensic investigations and incident response team (CIRT) activitiesAutomate incident response playbooks for detected threatsLeverage vendors and internal resources to interface various security tools to automate critical response tasksAssign work to Cyber SOC for remediationEscalate pertinent findings in a timely mannerSupport Compliance managers in providing Cybersecurity artifactsAlign information cybersecurity operations with NIST, and ISO 27001 requirementsEssential Qualifications and Education:Attack sequences and tactics, for example MITRE ATT&CK or prior red team experienceDirect experience and responsibility with network security technologies (firewall, IPS, encryption, etc), risk assessment, incident response, and cybersecurity frameworks (ISO 27001, NIST CSF)Project management experienceExperience with securing cloud services and APIsExperience with forensic investigation experienceExperience with security incident and investigation reports/briefingsExperience with Active DirectoryExperience with Microsoft desktop and server operating systemsExperience in a team-oriented, collaborative environmentStrong analysis and problem-solving skillsStrong oral and written communication skillsDetail oriented in investigations and communicationsAble to handle confidential investigations with discretionAbility to multi-task and prioritize workloadFamiliarity with PowerShell, Python and/or SQL is a plusFamiliarity with security orchestration, automation and response (SOAR) is a plusDesired Certification:CISSP, GSEC, Security+, Vendor CertificationsPreferred Qualifications and Education:Working knowledge of the following Information Security domains:Cloud SecurityNetwork SecurityVulnerability and Threat ManagementIdentity and Access Management (IAM)Database SecurityApplication Security10 years of direct employment in a cybersecurity full-time role5 years of experience working with threat intelligence feeds and IOCs3 years of experience in a cybersecurity architectrole3 years of experience with perimeter security administration (Web proxy, SMTP gateway, firewall)3 years of experience with security information and event management (SIEM) tools3 years of experience with endpoint protection tools