Lead Cyber Security Engineer

The Lead Cybersecurity Engineer will primarily focus on: 

• Identification and leading the efforts to counter security breaches and help reduce the likelihood
  of security incidents by taking a proactive stance on monitoring and alerting, then mitigation and/or
  remediation of threats. 
• Define, plan, implement,
  maintain, and upgrade security and compliance policies, measures, and controls.
  
• Assist with the creation and implementation of a security awareness program(s) to raise the level of awareness and contribute positively towards threat prevention.
  
• Lead cybersecurity response by analyzing security and data breaches to identify causes and update incident
  response, disaster recovery, and business continuity plans, and work with the CB Group Data Protection Officer (DPO) to identify breaches and manage response.
  
• Ensure end-user
  compliance with
  company security policies.
  
• Evaluate Common Vulnerabilities and Exposures (CVE) and ensure vulnerabilities are addressed based on severity across the enterprise. This includes regular reviews of NIST databases. 
  
• To evaluate emerging AI threats and develop a framework to provide a high level of assurances and risk mitigating process s part of a continuous risk management.
  
• Remain current with emerging trends and best practices, ensuring proposed solutions align with group strategic goals and performance needs. 

Demonstrated Knowledge, Skills, Experience: 

• A first degree in computer science engineering or a related field. 
• 3-5 years of demonstrated
  progressive experience in
  IT Security, Cybersecurity and Compliance,
  or similar
  role, where supervisory experience would be an asset. 

• Demonstrated experience with ISO27001, NIST CSF, and security governance frameworks is desired. 

• Experience with FORTINET and CISCO enterprise networking and security devices would be a plus. 

• Ability to work in a high-stress environment as the subject matter expert on cybersecurity to plan, mitigate, and lead the
  cybersecurity response. 

• Solid networking knowledge is required (OSI network layers, TCP/IP)  

• Certified in or experience working within
  the ITIL
  framework
  for service delivery would be an asset. 
• Advanced security certification and/training and experience with common tools for threat detection and management is required. 

Specific challenges and working conditions:  

• Remote support options are to be prioritized and implemented in coordination with the applications support team where feasible to reduce technical site visits. 

• Ability to travel to locations across Jamaica for any required on-site advanced support, site visits to learn the business operations as needed,
  and can include
  after-hours, weekends,
  and/or public holidays as necessary to ensure business processes that depend on the application are fully operational, to meet business and customer demands.