Emovis
Emovis is hiring: Information / Cybersecurity Manager (Denver) in Denver
Emovis, Denver, CO, US
ABOUT EMOVIS
Emovis Operations US, Inc. is part of Abertis Mobility Solutions (AMS) - a leading Intelligent Transportation Systems (ITS) & Electronic Tolling System (ETS) integrator. Emovis Operations US, currently conducts business operations various US states.
JOB PURPOSE
This role is primarily focused on Program management and delivery of INFOSEC / Compliant requirements for a significant program in Denver, with oversight responsibilities for INFOSEC throughout the US operations. This is NOT a hands-on role the emphasis is on Program / Project Management and alignment of INFOSEC GRC for multiple programs across the US.
POSITION SUMMARY
- Reporting to CEO US, and in collaboration with the Global Security Manager to implement, maintain and continually enhance cyber security implementations and project deliverables , that meet the AMS / Emovis Groups strategic direction, legal, regulatory and contractual obligations and objectives
- To provide expert advice on INFOSEC to satisfy current and future initiatives in the US
- To participate in Bids and Tenders for new business in the US, ensuring that new projects are delivered with security by Design & By Default,
- To ensure Emovis US operations successfully maintain annual Type 2 SOC 1 and 2 Audits and PCI DSS in accordance with contractual obligations, and that new business ventures similarly attain the same level of compliance.
- To manage information security risks relating to business operations, information assets, individuals and with third party service providers
- To ensure appropriate security controls and safeguards exist to protect information systems and data from adverse events
- Liaise with and support business stakeholders in respect of ensuring resilience, business continuity (including periodic tests) related security activities
- To work with our clients and business partners to ensure contractual obligations are defined, maintained and reported as required
RESPONSABILITIES
- To define and manage the implementation of INFOSEC requirements to satisfy current and future business programs
- Ensure INFOSEC by Design and Default is encompassed in all projects to satisfy legal, regulatory and contractual obligations
- Oversea the annual SOC audit program across US Operations
- Advise on, support and manage PCI-DSS compliance audits to achieve satisfactory results and accreditations on time
- Support and direct other operational and functional leads to promote and ensure compliance with Group Security Strategy
- Advise and support the implementation of Data Protection and Cyber Security requirements in bids, tenders and business improvement projects
REQUIREMENTS
- Degree in a technical discipline (e.g. Computer Science)
- Minimum 5 years as a Senior Information Security Manager or similar
- Information security and compliance background
- Expert in Program / Project management
- SOC and PCI audit experience
- Good knowledge of CIS and similar frameworks
- Security trends impacting business continuity concepts (i.e. resilience, redundancy, backup & restore)
- Knowledge of cloud and AI technologies and solutions
- Proficient in English (Spanish desirable)
OTHERS
- Very strong project management background
- Strong report writing / documentation skills
- Good interpersonal skills / management
- Team player and mentor
- Meet deadlines
- Resilient and optimistic should change occur
- High Integrity and trustworthiness
- Geographic mobility to work in various locations in the US potentially extended periods