IT Manager – Cyber Defense
| Company | Medtronic |
|---|---|
| Location | Parker, CO, USA, Boston, MA, USA, Plainfield, IN, USA, Shrewsbury, NJ, USA, Irvine, CA, USA, Mansfield, MA, USA, Tempe, AZ, USA, Memphis, TN, USA, Northridge, Los Angeles, CA, USA, San Antonio, TX, USA, Blaine, MN, USA, Miami Lakes, FL, USA, Brooklyn Park, MN, USA, North Haven, CT, USA, Duluth, GA, USA, Lafayette, CO, USA |
| Salary | $127200 – $190800 |
| Type | Full-Time |
| Degrees | Bachelor’s |
| Experience Level | Senior, Expert or higher |
Requirements
- Bachelor’s degree
- 5+ years of experience with a bachelor’s degree or 3+ years of experience with an advanced degree
Responsibilities
- Lead the design of systems and processes for a global cybersecurity operation to have full visibility across the globe on cyber threats and alerting.
- Drive the incident response plan for the organization enrolling leadership to follow a well-rehearsed plan when a cyber event occurs.
- Manage detection and response capabilities including software, third party security operations center, and threat hunting. Lead the team responsible for security investigations.
- Develop and enhance an information security and cyber defense management framework.
- Identify and prepare response strategy for emerging technology such as deep fakes, and AI.
- Coordinate and manage external relationships as it relates to security assessment services as well as incident response requirements.
- Create a roadmap for cyber security operations and identify business threats within the current business environment and on key business decisions including mergers and acquisitions.
- Interact with a wide group of disciplines across the company such as risk and compliance team, corporate communications, legal, government affairs, etc.
- Build an ongoing enhancement roadmap and future direction of team and technology closely mapped to Medtronic’s strategy and overall technology initiatives and roadmaps.
- Create and communicate regular threat briefings, intelligence communications for all areas of the Enterprise.
- Ensure monitoring for attacks, intrusions and unusual, unauthorized or illegal activity.
- Engage in ‘ethical hacking’, for example, simulating security breaches.
- Monitor and respond to ‘phishing’ emails and ‘pharming’ activity.
- Managing and leading a team of security professionals that support the business portfolios, providing coaching, feedback and driving accountability.
Preferred Qualifications
- 5+ Security incident response management experience
- Proven speedy decision-making skills
- Strong communication skills, including with employees, clients, senior management and vendors.
- Strong results orientation (driving to deadlines, financial targets, project goals, etc.)
- Expert understanding of NIST CSF and response procedures in a global organization
- 5+ years of information security assessment, architecture, engineering, and operations
- 5+ years of experience aligned to a relevant architecture discipline (integrations, data, services, applications, infrastructure)
- 5+ years of experience and strong knowledge of Enterprise-class architecture concepts, definition, and creation
- Specialized training on managing and communicating top secret/confidential information Certifications in information security, OSCP, CISSP, Ethical Hacking
- Advanced knowledge and training on the dark/black web activity
- High degree of ‘learning agility’ with the ability to readily consume and apply new information and concepts with developed analytical problem-solving skills.
- Strong business acumen, decision making, and influence skills across all levels of an organization.
- Experience in business capability and process modeling.
- Excellent leadership and teamwork skills
- Ability to work collaboratively and partner with employees, leaders, clients, and vendors.
- Demonstrated ability to work in a global, virtual organization.
- Excellent presentation skills, including the ability to translate technical information into business terms (e.g., ability to explain complex technical solutions and architecture strategies to non-technical resources)
- Knowledge in user experience modeling, information design, and concept generation.
- Technology depth and credibility with technical staff.
- Work experience in the Medical Device Industry, or other regulated industry.
- Ability to mentor and develop business, architecture, and technical resources.