DOT Security leverages expert personnel, efficient processes, & effective technology to improve client cybersecurity through outstanding detection, response, risk management, & compliance services. DOT continuously improves internal processes & technology to enhance provided services & yield increased client resilience against cyberattacks.
DOT is seeking to fill the role of Virtual Chief Information Security Officer (vCISO). A Virtual Chief Information Security Officer (vCISO) acts as the client liaison for Managed Security services. The vCISO coordinates with the SOC team, client executive leadership, & client IT support to ensure excellent services are delivered.
The vCISO is not a remote position. The vCISO is required to be on-site at the DOT Security- Security Operations Center.
Responsibilities Advise clients on cyber risk & appropriate security training for intended audiencesAlign client cybersecurity strategy with information technology (IT) & business goalsAnalyze & provide feedback on cybersecurity policies, procedures, & plansAssess the effectiveness of client cybersecurity measures & controlsCompile & maintain Risk Registers with comments & next-touch dates to drive progressDevelop and deliver reports to inform client decision makers about cyber riskEstablish & maintain communication channels with client IT & executive stakeholdersMonitor & report client-level telemetry status, coverage, & performanceShare meaningful insights about client risks to improve risk comprehensionTrack client maturity against CIS Control groups over timeAct with a sense of urgency, identify alternatives, & set realistic timeframes for resolutionComplete work based on priority, follow through as promised, & set expectationsContribute to & perform both new & pre-existing plans, instructions, & proceduresDemonstrate active listening & critical thinking skills & comprehend received informationInterpret & understand complex & evolving concepts in a dynamic, fast-paced environmentMaintain awareness of technology advancements & their cybersecurity implicationsUnderstand & present technical concepts to non-technical audiencesProvide exceptional customer service & remain calm under pressureResolve problems in early stages & ticket labor, notes, & details in a ticketing systemThings We Are Looking For Feedback interpretation for process, product, & service improvementPolicy, process, & procedure writing & review conceptsRisk assessment methodologies & management processes (scoring, mitigation)Supply chain risk management standards, processes, & practicesAbility to work independently & as part of a teamAdaptability to situations in which data is incomplete or where no precedent existsAssets (applications/data/devices/networks/users) & related cybersecurity concepts (monitoring/hardening)Communicate & collaborate in a clear, professional, & concise manner using technology, tools, & workspacesCritical thinking, customer service skills, & passion for cybersecurityDocumenting & communicating complex technical concepts, incidents, problems, & eventsPreparation & delivery of reports, plans, & briefings using presentation technologySystem administration and cybersecurity theories, concepts, & methodsSystem resiliency, redundancy, data backup, recovery, business continuity, & disaster recovery conceptsEthical hacking principles & the ability to work ethically & with integrityOther Desired Attributes
Public Trust background check (Limited Requirement)Relevant work experience in managed services industryCyber community participation (conferences/groups/tool authoring/CTFs)Familiarity with at least one scripting language (Perl/Python/PowerShell)Understanding of CIS Controls, NIST CSF, MITRE ATT&CK, and OWASPCertifications including CISSP, CISM
#J-18808-Ljbffr
