Apply on Employer Site

Metropolitan Transportation Authority · 6 hours ago

Cybersecurity Officer- Manager Cloud Security

New York, NY

Full-time

Hybrid

Mid, Senior Level

$149K/yr - $197K/yr

4+ years exp

Metropolitan Transportation Authority is seeking a Cybersecurity Officer- Manager Cloud Security to provide technical leadership and management of their cybersecurity program. The role involves managing internal and external threats, developing staff, and overseeing processes associated with risk management in various technical domains.

Transportation/Trucking/Railroad

Responsibilities

Provide leadership to a strong talent pool of technical professionals

Lead a team of multi-functional technical staff planning, building, and maintaining cybersecurity tools, configurations, and risk mitigation to support Information and Operational Technology applications and/or infrastructure products

Lead others, as appropriate, and when necessary, which will consist of one or more agile coaches, data analytics researchers, and other cybersecurity personnel

Provide leadership in the development of inter-team communication and cohesiveness; sustain culture and support assigned staff during organizational growth/changes

Provide direction on evaluation, selection, implementation, and maintenance of cybersecurity tools, processes, and techniques for their assigned cyber domains and products, ensuring appropriate investment in strategic and operational systems

Lead teams to complete projects when a project manager has not been assigned

Attain significant achievements managing technical teams, contractors, and vendors

Attract, develop, coach, and retain high-performance team members, empowering them to elevate their level of responsibility, span of control, and performance in conjunction with the Cybersecurity Management and IT Workforce Planning & Workload Management office

Build staff expertise and competence to meet evolving demands within the Enterprise Product Management unit

Demonstrate consistent understanding of funding, communications, and systems; recommend timelines and resources needed to achieve the program goals

Collaborates with IT Business Management Services to identify procurement contracts to support program related activities

Assesses and makes recommendations on the improvement and re-engineering within the IT Department, and works with the stakeholders to keep the total cost of ownership down

Promote the use of employee self-service and mobile connectivity within products to reduce the reliance on paper

Recommends and supports automation of business process creating in-line forms and approvals, reducing the reliance on manual approvals that could be untimely

Uses judgment to form conclusions that may challenge conventional wisdom

Coordinates and facilitates consultation with stakeholders to define business and systems requirements for new technology implementations, developing business cases and cost justifications for such initiatives

Provides direction on evaluation, selection, implementation, and maintenance of information systems, ensuring appropriate investment in strategic and operational systems

Advises MTA IT management, as information becomes available, on the changing trends and emerging technology and their potential use within the MTA

Directs the development of the analysis required to determine if Information Technology projects should follow a “Build” (develop with in-house staff) or “Buy” (cloud or packaged solution) methodology

Manages the development and implementation of new modules within assigned products

Advises on the selection, prioritization, development, and implementation of products as they relate to the selection, acquisition, development, and installation of MTA IT and OT Security, applications and infrastructure

Participates in overall business planning, bringing current knowledge and future vision of technology and systems as related to the company’s goals

Responsible for leading and reporting on various product progress and deliverables, ensuring that the IT/OT needs of the MTA are met on time and within budget, including identifying weekly, monthly, and annual performance targets to show progress on IT product work and OT objectives

Ensure continuous delivery of product services through oversight of service level agreements with end users and monitoring of product performance

Responsible for the recruitment, development, motivation, training, and retention of a diverse and high performing multi-level IT/OT team professionals, conforming to budgetary objectives and Human Resources policy and programs in conjunction with the IT Workforce Planning & Workload Management office

Develop business case justifications and cost/benefit analyses for IT spending and initiatives, keeping customizations to a minimum and total cost of ownership down

Manage and plan the future technical architecture, providing insight into the future of their area of technology in order to continually improve effectiveness and efficiency

Manage and plan the development of roadmaps related to their area(s) of expertise to manage and meet identified technology needs

Manage and plan the evaluation of new technologies relative to their domain(s) to determine applicability to and best meet the needs of MTA and constituent agencies

Manage and ensure disaster recovery and contingency plans for their domain(s) to provide users with minimal interruptions in service

Oversees architectural direction for domains under management to meet senior management and cybersecurity goals

Understand, review, and approve Cybersecurity Reference Architectures and Solutions for applying them

Revalidates systems to the most recent reference architectures to determine gaps, develop and manage programs to align systems to the newest standards and reference architectures

Contribute to and own technical elements of RFPs and RFIs, and negotiate with vendors on technical issues to ensure results are delivered in line with user and organization requirements

Manages contracts and expenses to ensure SLAs and contract renewals are processed timely manner

Provide contract management support to ensure vendor deliverables are met

Manage and lead major projects and assign service providers with technical expertise to address mission critical issues, evaluate ongoing vendor service levels, and enforce SLAs and penalties

Ensure detailed and updated documentation is in place for cybersecurity systems and user processes

Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the IT Security Manager, where appropriate

Provides timely and relevant updates to appropriate stakeholders and decision makers

Communicates investigation findings to relevant business units to help improve the information security posture

Provides technical guidance to project managers and senior leadership on cybersecurity and technology strategies

Ensure quality and review, and guidance on tests of new systems and manage cybersecurity risks and remediation system testing, baseline, and best practices

Provide escalation support to project teams in their area of expertise to promote technical understanding and talent development

Provide guidance and take input from Analysts, Engineers, Architects, and Technology Subject Matter Experts on cybersecurity and technology best practices, current threat landscape, and a risk management approach for optimal alignment

Provides sound cybersecurity recommendations

Provide leadership and advisement when necessary during incident response, and provide continuous improvement updates to the threat model for risks to the business and systems

Ensure specific monitoring points are continually updated to assess the performance of technologies in their domain(s). Identify and manage the necessary actions to ensure optimal performance and reliability

Validates and maintains incident response plans and processes to address potential threats

Compiles and analyzes data for management reporting and metrics

Research emerging technologies and process improvements to stay current and plan for the evolving threat landscape to ensure strategy meetings are current threats

Monitors relevant information sources to stay up to date on current attacks and trends

Ensure cybersecurity technology solutions meet strategy, meet security framework objectives, and business objectives

Hypothesizes new threats and indicators of compromise

Qualification

Cloud security expertiseRisk assessmentIncident responseForensicsSecurity architectureComplianceRegulations knowledgeIdentityAccess Management (IAM)Security monitoringSIEMCloud computing proficiencyProject management principlesVendor managementBusiness acumenCloud-native application platformsEncryptionData protectionCloud-specific security toolsCommunicationLeadershipContinuous learningCollaborationProblem-solvingAdaptability

Required

Bachelor's Degree in Computer Science or related fields, or equivalent experience. An equivalent combination of education and experience may be considered in lieu of a degree

A minimum of 4 plus years of relevant experience

Requires prior experience with installing, maintaining, and troubleshooting technology systems

Must possess a deep understanding of technology and cybersecurity domain principles

Proven ability to manage projects and initiatives

Proven ability to manage people

Proven ability to add value to a team

Understanding of Operating Systems, Cloud, Mobile, and Applications

Understanding of TCP/IP (OSI Layers 1– 4) and Internet and Intranet technologies required (OSI Layers 5-7) required

Strong Verbal/written communication skills

Preferred

CISSP, CISM, or other advanced security-related certification preferred

Certifications in technology subdomains preferred (ie, Cloud, Applications, Infrastructure, Security Technology, etc.)

Experience in Project Management Principles (Waterfall and Agile) preferred

Some Scripting or programming skills (PERL, Python, PowerShell, etc.) preferred as needed

Proficient in Productivity Tools (ie, Office 365, G-Suite)

Experience with Spreadsheets and Data Analysis

Financial/budgeting planning and management experience is a plus

Company

Metropolitan Transportation Authority

Glassdoor3.6

The Metropolitan Transportation Authority is North America's largest transportation network, serving a population of 15.3 million people in the 5,000-square-mile area fanning out from New York City through Long Island, southeastern New York State, and Connecticut.

Founded in 1834

New York, NY, US

10001+ employees