Manager - Cyber Security MS

at  Ericsson

Petaling Jaya, Selangor, Malaysia -

Start DateExpiry DateSalaryPosted OnExperienceSkillsTelecommuteSponsor Visa
Immediate23 Oct, 2024Not Specified25 Jul, 2024N/ASecurity Controls,Facilitation,Dnb,External Agencies,Telecommunications,Risk Assessment,Critical Infrastructure,Mitigation Strategies,Decision Making,Ran,Information Technology,Security Protocols,Security,Risk,Interpersonal SkillsNoNo
Add to Wishlist Apply All Jobs
Required Visa Status:
CitizenGC
US CitizenStudent Visa
H1BCPT
OPTH4 Spouse of H1B
GC Green Card
Employment Type:
Full TimePart Time
PermanentIndependent - 1099
Contract – W2C2H Independent
C2H W2Contract – Corp 2 Corp
Contract to Hire – Corp 2 Corp

Description:

THE SKILLS YOU BRING

  • Minimum of [10-12] years of experience in cybersecurity, governance risk and compliance, preferably in telecommunications or critical infrastructure sectors.
  • Proven track record of successfully leading complex cybersecurity, governance, risk, and compliance initiatives.
  • In-depth knowledge of security protocols, procedures, and best practices for governance risk and compliance over telecommunication assets and critical infrastructure.
  • Strong analytical and problem-solving skills to identify patterns and develop actionable insights from collected data.
  • Excellent communication and interpersonal skills to collaborate with cross-functional teams, external agencies, and stakeholders.
  • Bachelor’s degree in cybersecurity, information technology, risk management, or a related field.
  • Strong understanding of cybersecurity principles, compliance frameworks (e.g., NIST, ISO
  • 27001, GDPR), and risk management methodologies.
  • Strong communication and interpersonal skills.
  • Ability to think strategically and drive innovation.
  • Relevant certifications (e.g., CISSP, CISA, CISM)

Single Point of Contact on operational security (SecOps) and governance risk compliance (GRC)matters related between Ericsson and DNB, including coordination and facilitation of Ericsson’s efforts across Ericsson Domains - Managed (Security) Services, Customer Support and Product/Solutions (RAN and CORE) to meet DNB security requirements Proactive and collaborative engagement across Ericsson Domains. Working jointly to address security concerns and support matters.

  • Establish trusted customer relationship as single point of contact for customer security. Ensuring customer security concerns are identified, understood, acknowledged, and addressed
  • Proactive consultation with DNB inclusive but not limited to multiple security domains, incl. risk assessment, data mgmt., privacy, product hardening, ISO 27001 security controls, procedures, and vulnerabilities
  • Identification of security non-compliances, then development of mitigation strategies, action plans and appropriate business responses aligned to Ericsson’sstrategy
  • Security Documentation as required by Ericsson and Customer, incl. Customer Requirements Documents, Security Management Plans, Security Compliance Registers or other
  • Security Reporting covering security status, issues, risks, and mitigations. Present security reports into appropriate forums as requested / required by Ericsson stakeholders or customers
  • Security Governance Meetings monthly, both internally and externally, for stakeholder alignment, decision making and communication on key risks and issues
  • Engagement with Ericsson Regional and Global security counterparts to ensure that security best practice is known and implemented when applicable
  • Work with Managed Security Services on the management of Cybersecurity Incidents related to DNB including engagement with PSIRT, Product Units, Ericsson Stakeholders and DNB Customer as required

Responsibilities:

Single Point of Contact on operational security (SecOps) and governance risk compliance (GRC)matters related between Ericsson and DNB, including coordination and facilitation of Ericsson’s efforts across Ericsson Domains - Managed (Security) Services, Customer Support and Product/Solutions (RAN and CORE) to meet DNB security requirements Proactive and collaborative engagement across Ericsson Domains. Working jointly to address security concerns and support matters.

  • Establish trusted customer relationship as single point of contact for customer security. Ensuring customer security concerns are identified, understood, acknowledged, and addressed
  • Proactive consultation with DNB inclusive but not limited to multiple security domains, incl. risk assessment, data mgmt., privacy, product hardening, ISO 27001 security controls, procedures, and vulnerabilities
  • Identification of security non-compliances, then development of mitigation strategies, action plans and appropriate business responses aligned to Ericsson’sstrategy
  • Security Documentation as required by Ericsson and Customer, incl. Customer Requirements Documents, Security Management Plans, Security Compliance Registers or other
  • Security Reporting covering security status, issues, risks, and mitigations. Present security reports into appropriate forums as requested / required by Ericsson stakeholders or customers
  • Security Governance Meetings monthly, both internally and externally, for stakeholder alignment, decision making and communication on key risks and issues
  • Engagement with Ericsson Regional and Global security counterparts to ensure that security best practice is known and implemented when applicable
  • Work with Managed Security Services on the management of Cybersecurity Incidents related to DNB including engagement with PSIRT, Product Units, Ericsson Stakeholders and DNB Customer as required.


REQUIREMENT SUMMARY

Min:N/AMax:5.0 year(s)

Information Technology/IT

IT Software - Network Administration / Security

Other

Graduate

Cybersecurity information technology risk management or a related field

Proficient

1

Petaling Jaya, Malaysia