Fox Rothschild
Manager, Cybersecurity Operations & Response
Fox Rothschild, Washington, District of Columbia, us, 20022
Description
As a member of the Information Services Department, the Manager, Cybersecurity Operations & Response supports the strategic design and execution of the Firm’s Cybersecurity Operations & Response program.
ESSENTIAL FUNCTIONS:
Manage both the short and long-term strategic design and execution of the Firm’s Cybersecurity Operations & Response program.
Develop and oversee the Firm’s threat and vulnerability management program.
Develop associated playbooks, policies, and procedural documentation.
Oversee and direct all cyber event response efforts.
Act as an escalation point for all security operations and response efforts.
Perform threat and vulnerability assessments and remediation activities to ensure systems are protected from known and potential threats.
Develop and distribute associated reporting to measure overall program success and inform management of the threat landscape.
ADDITIONAL FUNCTIONS:
Additional duties as assigned.
QUALIFICATIONS (EXPERIENCE, KNOWLEDGE, SKILLS AND ABILITIES):
Education:
Bachelor’s degree in information security or an equivalent combination of work and education required.
Experience:
Minimum of eight years of information security experience required including some direct experience with security operations, incident response, and threat/vulnerability management.
Certifications:
CISSP, CISM, or similar security certifications.
Knowledge, Skills, & Abilities:
Knowledge of information security principles, including security operations, incident response, and threat and vulnerability management.
Knowledge of NIST and MITRE ATT&CK frameworks.
Experience in developing, documenting, and maintaining security procedures including security response playbooks.
Experience in developing, managing, and executing a threat and vulnerability management program.
Strong analytical and problem-solving skills to enable effective security event and problem resolution.
Ability to work well under minimal supervision.
Strong written and verbal communication skills.
Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience, and build long-term relationships.
WORK ENVIRONMENT & PHYSICAL DEMANDS:
This job operates in a clerical, office setting. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.
PHYSICAL REQUIREMENTS
Sedentary work: Exertion of physical strength to lift, carry, push, pull, or otherwise move objects up to 10 pounds. Work involves sitting most of the time. Walking and standing is often necessary in carrying out job duties.
VISUAL ACUITY
Worker is required to have close visual acuity to perform an activity such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal; extensive reading.
COMPENSATION & BENEFITS
The salary range for this position applies to Washington, D.C. The salary range reflects a variety of factors that are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands and other business and organizational needs. It is not typical for an individual to be hired at or near the top of the range for a position. A reasonable estimate of the current range for this position is $155,000 to $185,000.
For information on Fox Rothschild's compensation and benefits visit: Compensation & Benefits (foxrothschild.com) (https://www.foxrothschild.com/careers-for-staff/compensation-benefits)
DISCLAIMER
Fox Rothschild LLP is under no obligation to provide sponsorship for this position. Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This job description is not an exhaustive list of all functions that the employee may be required to perform and the employee may be required to perform additional duties. Additionally, management reserves the right to review and revise the job description at any time. Employment with the firm is at-will. Employees must be able to satisfactorily perform all of the essential functions of the position with or without a reasonable accommodation. If an accommodation request would cause an undue hardship or a safety concern, the individual may not be eligible for the position.
Equal Opportunity Employer - vets, disability
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)
As a member of the Information Services Department, the Manager, Cybersecurity Operations & Response supports the strategic design and execution of the Firm’s Cybersecurity Operations & Response program.
ESSENTIAL FUNCTIONS:
Manage both the short and long-term strategic design and execution of the Firm’s Cybersecurity Operations & Response program.
Develop and oversee the Firm’s threat and vulnerability management program.
Develop associated playbooks, policies, and procedural documentation.
Oversee and direct all cyber event response efforts.
Act as an escalation point for all security operations and response efforts.
Perform threat and vulnerability assessments and remediation activities to ensure systems are protected from known and potential threats.
Develop and distribute associated reporting to measure overall program success and inform management of the threat landscape.
ADDITIONAL FUNCTIONS:
Additional duties as assigned.
QUALIFICATIONS (EXPERIENCE, KNOWLEDGE, SKILLS AND ABILITIES):
Education:
Bachelor’s degree in information security or an equivalent combination of work and education required.
Experience:
Minimum of eight years of information security experience required including some direct experience with security operations, incident response, and threat/vulnerability management.
Certifications:
CISSP, CISM, or similar security certifications.
Knowledge, Skills, & Abilities:
Knowledge of information security principles, including security operations, incident response, and threat and vulnerability management.
Knowledge of NIST and MITRE ATT&CK frameworks.
Experience in developing, documenting, and maintaining security procedures including security response playbooks.
Experience in developing, managing, and executing a threat and vulnerability management program.
Strong analytical and problem-solving skills to enable effective security event and problem resolution.
Ability to work well under minimal supervision.
Strong written and verbal communication skills.
Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience, and build long-term relationships.
WORK ENVIRONMENT & PHYSICAL DEMANDS:
This job operates in a clerical, office setting. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.
PHYSICAL REQUIREMENTS
Sedentary work: Exertion of physical strength to lift, carry, push, pull, or otherwise move objects up to 10 pounds. Work involves sitting most of the time. Walking and standing is often necessary in carrying out job duties.
VISUAL ACUITY
Worker is required to have close visual acuity to perform an activity such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal; extensive reading.
COMPENSATION & BENEFITS
The salary range for this position applies to Washington, D.C. The salary range reflects a variety of factors that are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands and other business and organizational needs. It is not typical for an individual to be hired at or near the top of the range for a position. A reasonable estimate of the current range for this position is $155,000 to $185,000.
For information on Fox Rothschild's compensation and benefits visit: Compensation & Benefits (foxrothschild.com) (https://www.foxrothschild.com/careers-for-staff/compensation-benefits)
DISCLAIMER
Fox Rothschild LLP is under no obligation to provide sponsorship for this position. Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This job description is not an exhaustive list of all functions that the employee may be required to perform and the employee may be required to perform additional duties. Additionally, management reserves the right to review and revise the job description at any time. Employment with the firm is at-will. Employees must be able to satisfactorily perform all of the essential functions of the position with or without a reasonable accommodation. If an accommodation request would cause an undue hardship or a safety concern, the individual may not be eligible for the position.
Equal Opportunity Employer - vets, disability
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)