Apply on Employer Site

CFGI · 5 months ago

Cybersecurity - Director

United States

Full-time

Remote

Director/Executive

CFGI is a unique and highly specialized financial consulting firm that assists the office of the CFO through various business scenarios. The Director of Cybersecurity will build and manage cybersecurity frameworks, conduct risk assessments, and guide clients on compliance and governance in cybersecurity.

AccountingConsultingFinancial Services

Work & Life Balance

H1B Sponsor Likely

Responsibilities

Build cybersecurity Process Risk & Control frameworks for clients that are rationalized against applicable laws and standards

Conduct Risk Assessment and Maturity Assessments for clients

Audit Control definition and control testing against client’s Internal Audit framework, or against industry standards or laws & regulations

Conduct Cybersecurity and Data Privacy Compliance readiness assessments for clients

Guide clients in establishing cybersecurity policies, standards, and procedures

Manage cybersecurity training & awareness services for clients from design to implementation

Oversee the implementation and management of security tools, technologies, and processes

Advise clients on cybersecurity functions’ metrics and reporting for various level of client audiences including Audit Committee and Board of Directors

Be the client’s Subject Matter Expert on compliance questions for cybersecurity regulations and industry practices

Provide governance services for clients to oversee their cybersecurity functions and practices, including governance over: Policies & Procedures, Risk Management, Vulnerability Management, Incident Management, etc

Build Risk Management practices for clients, including policies, procedures, Risk Register, etc

Assist clients in implementing market GRC tools

Lead Third Party Risk Management (TPRM) for clients, including designing and operationalizing a TPRM framework, reviewing existing and new vendors for clients, and provide ongoing monitoring services

Needs strong understanding/experience of the German/EU regulatory compliance landscape in Cybersecurity / Data Privacy space and its impact on businesses

Ability to prioritize and multitask. Flexibility and adaptability in work approach

Ability to manage project plans for client various data privacy engagements, including creating tasks, timeline and budgets

Ability to report to leadership and clients on status updates periodically, including progress and challenges

Strong interpersonal and communication skills; experience with cross-cultural communications

Agile and flexible, capable of dealing with ambiguity, and confront challenges and opportunities with speed, endurance and decisiveness

Manage a team of consultants and managers on various projects

Qualification

Cybersecurity Process Risk & ControlRisk AssessmentCybersecurity ComplianceGovernance ServicesGRC Tools ImplementationThird Party Risk ManagementGerman/EU Regulatory ComplianceIndustry CertificationsLanguages GermanLanguages FrenchLanguages EnglishProject ManagementInterpersonal SkillsTeam ManagementCommunication Skills

Required

Build cybersecurity Process Risk & Control frameworks for clients that are rationalized against applicable laws and standards

Conduct Risk Assessment and Maturity Assessments for clients

Audit Control definition and control testing against client's Internal Audit framework, or against industry standards or laws & regulations

Conduct Cybersecurity and Data Privacy Compliance readiness assessments for clients

Guide clients in establishing cybersecurity policies, standards, and procedures

Manage cybersecurity training & awareness services for clients from design to implementation

Oversee the implementation and management of security tools, technologies, and processes

Advise clients on cybersecurity functions' metrics and reporting for various level of client audiences including Audit Committee and Board of Directors

Be the client's Subject Matter Expert on compliance questions for cybersecurity regulations and industry practices