Be an early applicantLess than 25 applicants

Company

iHeartMedia · 4 hours ago

Senior Director, Cyber Defense

North Carolina, United States

Full-time

Remote

Senior Level, Lead/Staff, Director/Executive

$180K/yr - $225K/yr

10+ years exp

Maximize your interview chances

AdvertisingAdvertising Platforms

Actively Hiring

Insider Connection @iHeartMedia

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Form a Cyber Defense Execution team to defend against cyber-attacks and conduct holistic root cause analysis and investigations.

Assist CISO with launching a comprehensive information and cyber security program.

Design defensive cyber security strategies to protect the enterprise.

Establish security policies and standards for on and off prem, network, apps, and cloud infrastructures.

Mature and enhance current state security and risk posture.

Institute a threat modeling process.

Partner with BISO and business partners to implement product security standards and assessments and reduce business line risks.

Keep abreast of emerging technologies, threats, and risks to mitigate impact to the company.

Stay abreast of the evolving threat and regulatory landscape.

Partner with CISO to establish risk mitigation strategies through technology and processes.

Partner with enterprise IT teams to solve for proactive mitigation solutions to issues, vulnerabilities, and remediation efforts.

Ensure security strategy execution and a layered defense approach to protecting the enterprise.

Collaborate with leaders responsible for protecting the company to ensure alignment on risk mitigation strategies.

Partner with technical and business teams to identify risk areas and implement protective controls to defend the company systems and data against adversaries and threats.

Support the GRC team by understanding laws, regulations, requirements, and the extended threat landscape and taking necessary precautions to protect the company from third party risks.

Align with the PMO team to ensure appropriate gates in the project management process to ensure continuous oversight of changes to the security and risk posture.

Assist CISO in maximizing and optimizing current state security tools and technology.

Provide hands on assistance and expertise to the SOC and T/VM teams to ensure threat intel, vulnerability self-assessments, and log data are used proactively to protect the company and build appropriate defenses.

Partner with Business and IT teams to ensure appropriate protection capabilities are implemented as part of security by design.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

CybersecurityCloud securityDefensive planningSecurity architecture designRisk managementMDR/EDRIDS/IPSSIEMSOARVMAWSGCPMicrosoft AzureMicrosoft 365 E5NIST CSFNIST 800-37/53FISMADISAPCIISOUnix/AIX/LinuxVMwareCitrixRoot cause analysisInformation assuranceIndustry best practices

Required

Bachelor’s degree

10+ years’ experience in information and cyber security

Strong understanding of detection, protection, prevention technologies such as MDR/EDR, IDS/IPS, SIEM, SOAR, VM, and cloud security technologies, etc.

In depth knowledge of major technologies, platforms, systems, such as AWS, GCP, Microsoft Azure, Microsoft 365 E5, etc.

Strong problem solving skills, root cause analysis, and information assurance proficiency.

Hands on technical expertise with deep knowledge of industry best practices in various aspects of information and cyber security.

Knowledge of industry standard frameworks – NIST CSF, NIST 800-37/53, FISMA, DISA, etc., PCI, ISO, etc.

Experience with Unix/AIX/Linux Systems/VMware/Citrix/AWS/Azure experience

Benefits

Employer sponsored medical, dental and vision with a variety of coverage options

Company provided and supplemental life insurance

Paid vacation and sick time

Paid company holidays, including a floating holiday that enable our employees to celebrate the holiday of their choosing

A Spirit day to encourage and allow our employees to more easily volunteer in their community

A 401K plan

Employee Assistance Program (EAP) at no cost – services include telephonic counseling sessions, consultation on legal and financial matters, emotional well-being, family and caregiving

A range of additional voluntary programs, such as spending accounts, student loan refinancing, accident insurance and more!