Cnm Llp
Manager- Cybersecurity & Privacy
Cnm Llp, Los Angeles, California, United States, 90079
CNM LLP is a technical advisory services firm that works with the top local talent on the most comprehensive and intriguing projects for discerning clients ranging from start-ups to closely held mid-market companies to large multi-national Fortune 1000 firms. The CNM reputation is built upon a foundation of professional excellence and trusted relationships and is recognized nationally for commitment to excellence. Employees value the open and honest environment, consistent focus on work life balance and an outstanding culture that is difficult to find anywhere else in the professional services industry. This unwavering attention to providing an exceptional work environment has enabled CNM to be recognized as a Great Place to Work for three consecutive years, as well as one of the Best Places to Work in Los Angeles and Orange County.CNM is currently offering an exciting Manager opportunity to be part of our growing Los Angeles Cybersecurity team. This position will actively participate and lead growth as we continue to build our practice. You will execute challenging and complex engagements and be exposed to components of Cybersecurity & Privacy strategy for our impressive clients. This position is currently a hybrid structure (60% at client/in office, 40% remote). There is local travel throughout Los Angeles and Orange County.Projects include: Cybersecurity risk and maturity assessments using frameworks such as ISO 270001, NIST CSF 2.0, CIS 18, PCI-DSS and MITRE ATT&CK. Developing security policies and procedures, in line with regulatory requirements and standards. Privacy projects and audits in support of CCPA/CPRA and GDPR compliance. Assisting clients with meeting PCI-DSS requirements. Security transformation programs – design & management of security solution implementations and/or remediation. Design and implementation of programs to improve capability areas such as Vulnerability Management, Incident Response, IT Disaster Recovery, Business Continuity, Threat Intelligence and Monitoring.Responsibilities
Lead, mentor, manage and train the team of Cybersecurity Senior Associates and collaborate with other ManagersOversee complex and specialized client engagements, reporting status and collaborating with Cybersecurity team members including: Associate Director, Director, Managing Director and PartnerLead or assist in the development of privacy program governance components (e.g., policies, procedures, standards, frameworks, trainings, notices) for clients across industriesSupport the Cybersecurity and Privacy practice in market expansionManage and lead project teams to review and assess IT environments, risks, and controls for companies that range from newly public high growth entities to the largest public companiesDeliver security technologies such as Firewalls, VPN, IDS/IPS and Endpoint securityDemonstrate a thorough practical and strategic understanding of complex information systems, cyber security concepts, threats, proactive defense principles, strategies and market leading solutionsLead project meetings, status updates, training sessions and other events as neededProvide relevant cybersecurity and IT security subject matter advice, findings, and recommendationsCollaborate with team members and clients on unique strategies that will enable organizations to withstand various internal and external risksForesee issues and challenges, while collaborating effectively across teams to implement creative and thoughtful solutionsAssess Business Continuity Plan (BCP) and Incident Response (IR) Preparedness and as needed assist in the preparation of BCP and IR Tabletop ExercisesPerform gap assessments of application/system disaster recovery plansAssist in the development of recovery plan documentsManage project delivery, customer satisfaction, and accurate timekeeping for billing purposesOrganize and manage multiple projects, efforts, and priorities concurrentlyProvide advisory assessments in relation to cybersecurity breach preventionWork independently on complex projects or work in a team as a project leaderSkills
Bachelor’s degree is required in a related field; Information Systems, Computer Science, Mathematics, Economics, Business, Finance or Accounting preferredMinimum of 5 years of Big 4 experience or related consulting/professional services firm experience with hands-on knowledge in Cybersecurity consultingCISSP Certification PreferredExcellent project management and organizational skillsDemonstrated ability to successfully lead teams and projects in delivering on Cybersecurity needsAbility to develop teams and provide feedback to assist in team members’ growthKnowledge and experience with the following Cybersecurity frameworks such as NIST Cybersecurity Framework ISO 270001, NIST CSF 2.0, CIS 18, PCI-DSS and MITRE ATT&CKKnowledge and experience with Governance and Policy CreationKnowledge and experience with threat modeling methodologies such as MITRE ATT&CKDelivery experience in executing Privacy projects and audits in support of CCPA/CPRA and GDPR complianceAbility to manage projects and teams according to budget while balancing team and client needsPlease note that this opportunity will primarily only require local travel (by car), and this position will involve both on-site and remote (work from home) workPay and Benefits
40-hour work weekTraining events to ensure CPE complianceMedical, Dental, Vision Plans401(k) matchPTO: 15 days accrued per yearCompany paid holidays, including company shutdown the week between Christmas and New Years3 wellness daysVarious opportunities for peer engagement: quarterly huddles, happy hours, summer and a holiday partyMonthly mobile reimbursementReimbursement allowances: flex, technology, health and wellness and personal developmentFully stocked kitchenBase Pay $115,000 - $150,000Overtime bonus and Performance bonus in addition to the base payCNM LLP offers an excellent base, bonus and incentive compensation package. The benefits package is designed to meet an employee’s needs regardless of the stage an employee is at including medical, dental, paid maternity and parental leave, 401(k) with match and flexible spending accounts for employees and dependents. We offer training that assists employees in reaching their career goals and, in addition to a regular paid time off policy, we also offer an extra five days off between Christmas and New Year holidays annually for firm-wide shut down. CNM believes in social interaction and networking and employees participate in unbelievable social events each summer and winter. The firm also supports employees offering an annual technology bonus, health and wellness bonus, monthly cell phone reimbursement, fully stocked kitchens with food, drink and snacks and much, much more. Please reach out to our talent team and we will walk you through why you deserve a career with CNM LLP.Please note: all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws.
#J-18808-Ljbffr
Lead, mentor, manage and train the team of Cybersecurity Senior Associates and collaborate with other ManagersOversee complex and specialized client engagements, reporting status and collaborating with Cybersecurity team members including: Associate Director, Director, Managing Director and PartnerLead or assist in the development of privacy program governance components (e.g., policies, procedures, standards, frameworks, trainings, notices) for clients across industriesSupport the Cybersecurity and Privacy practice in market expansionManage and lead project teams to review and assess IT environments, risks, and controls for companies that range from newly public high growth entities to the largest public companiesDeliver security technologies such as Firewalls, VPN, IDS/IPS and Endpoint securityDemonstrate a thorough practical and strategic understanding of complex information systems, cyber security concepts, threats, proactive defense principles, strategies and market leading solutionsLead project meetings, status updates, training sessions and other events as neededProvide relevant cybersecurity and IT security subject matter advice, findings, and recommendationsCollaborate with team members and clients on unique strategies that will enable organizations to withstand various internal and external risksForesee issues and challenges, while collaborating effectively across teams to implement creative and thoughtful solutionsAssess Business Continuity Plan (BCP) and Incident Response (IR) Preparedness and as needed assist in the preparation of BCP and IR Tabletop ExercisesPerform gap assessments of application/system disaster recovery plansAssist in the development of recovery plan documentsManage project delivery, customer satisfaction, and accurate timekeeping for billing purposesOrganize and manage multiple projects, efforts, and priorities concurrentlyProvide advisory assessments in relation to cybersecurity breach preventionWork independently on complex projects or work in a team as a project leaderSkills
Bachelor’s degree is required in a related field; Information Systems, Computer Science, Mathematics, Economics, Business, Finance or Accounting preferredMinimum of 5 years of Big 4 experience or related consulting/professional services firm experience with hands-on knowledge in Cybersecurity consultingCISSP Certification PreferredExcellent project management and organizational skillsDemonstrated ability to successfully lead teams and projects in delivering on Cybersecurity needsAbility to develop teams and provide feedback to assist in team members’ growthKnowledge and experience with the following Cybersecurity frameworks such as NIST Cybersecurity Framework ISO 270001, NIST CSF 2.0, CIS 18, PCI-DSS and MITRE ATT&CKKnowledge and experience with Governance and Policy CreationKnowledge and experience with threat modeling methodologies such as MITRE ATT&CKDelivery experience in executing Privacy projects and audits in support of CCPA/CPRA and GDPR complianceAbility to manage projects and teams according to budget while balancing team and client needsPlease note that this opportunity will primarily only require local travel (by car), and this position will involve both on-site and remote (work from home) workPay and Benefits
40-hour work weekTraining events to ensure CPE complianceMedical, Dental, Vision Plans401(k) matchPTO: 15 days accrued per yearCompany paid holidays, including company shutdown the week between Christmas and New Years3 wellness daysVarious opportunities for peer engagement: quarterly huddles, happy hours, summer and a holiday partyMonthly mobile reimbursementReimbursement allowances: flex, technology, health and wellness and personal developmentFully stocked kitchenBase Pay $115,000 - $150,000Overtime bonus and Performance bonus in addition to the base payCNM LLP offers an excellent base, bonus and incentive compensation package. The benefits package is designed to meet an employee’s needs regardless of the stage an employee is at including medical, dental, paid maternity and parental leave, 401(k) with match and flexible spending accounts for employees and dependents. We offer training that assists employees in reaching their career goals and, in addition to a regular paid time off policy, we also offer an extra five days off between Christmas and New Year holidays annually for firm-wide shut down. CNM believes in social interaction and networking and employees participate in unbelievable social events each summer and winter. The firm also supports employees offering an annual technology bonus, health and wellness bonus, monthly cell phone reimbursement, fully stocked kitchens with food, drink and snacks and much, much more. Please reach out to our talent team and we will walk you through why you deserve a career with CNM LLP.Please note: all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws.
#J-18808-Ljbffr