Cybersecurity Operations Manager at Save the Children

Role Purpose:

The Cybersecurity Operations Manager is responsible for the day-to-day operations of SCI’s Cybersecurity Operations function, part of our growing Cybersecurity & Information Assurance team.

The Cybersecurity Operations Manager is responsible for a team of four (remote-based) information security analysts and will work closely with SCI Information Security Architect, colleagues in the Information Assurance team, the Global IT Operations team and other technical teams across IT. In this capacity, the role holder will act as a technical authority on cybersecurity management across SCI and provide expertise and guidance to senior stakeholders in Centre, Country Offices, Regional Offices and Save the Children Member organisations.

This vital role is responsible for identifying, analysing, monitoring, mitigating, and managing threats and vulnerabilities to all SCI’s IT systems and networks.

EXPERIENCE AND SKILLS

Essential

• A minimum of 5 years’ experience working in a cyber security / information security function within a complex and / or global organisation
• Experience of working within an enterprise IT environment with practical knowledge of cloud computing (SaaS, PaaS, IaaS), physical networking infrastructure and management of a large client device estate
• Experience of working with a range of cybersecurity tools, platforms and services
• Experience of procuring cybersecurity tools and services
• Working knowledge of common information security standards and frameworks such as Cyber Essentials, ISO27000, NIST CSF, CIS, etc
• Experience of writing and implementing technical procedures and standards
• Experience of carrying out technical risk assessments and sharing results and recommendations with stakeholders
• Experience of managing cybersecurity incidents, including triage, analysis and containment
• Experience of using an IT Service Management (ITSM) platform to manage cybersecurity events and incidents
• Strong knowledge of key cyber threat actors and different types of cyber attack (‘the cyber threat landscape’)
• Strong knowledge of cybersecurity management principles
• Experience of working under pressure in a dynamic working environment
• Capacity to build and maintain excellent relations and to work effectively in a multicultural and multi-ethnic environment respecting diversity
• Strong personal, organisational and self-management skills
• Strong communication skills, in English
• Ability to explain complex, technical issues or challenges to technical and non-technical audiences
• Managing costs within an IT or Information Security function
• Commitment to Save the Children mission and values.

Desirable

• Good knowledge of the MITRE attack framework and the TTPs (tactics, techniques and procedures) used by cyber threat actors to compromise and disrupt systems
• Proficiency with at least one of the scripting language (e.g.: Perl, Python, PowerShell)
• Experience of ‘field operations and the IT Security-related issues associated with working in remote, inhospitable and insecure environments
• Strong understanding of/willingness to learn key trends in international and humanitarian development and how technology can and is being utilised to support these developments