What are the responsibilities and job description for the Director of Cyber Security position at Hornblower Group, Inc?
Description:
City Experiences is seeking a Director of Cyber Security for our Information Technology operation in Westlake Village, CA.
About You:
This person will be adaptable, dynamic, and embody City Experiences’ RESPECT Service System.
About the Opportunity:
City Experiences’ passion is to provide amazing experiences on land and water. Our 40-year success through organic growth and acquisitions has resulted in a portfolio of over 25 brands that welcome upwards of 30 million guests/riders annually. If you’re an enthusiastic team player who thrives in an environment where communication, creativity, and cooperation are encouraged, this may just be the opportunity for you.
Essential Duties & Responsibilities:
- Provide leadership and mentorship to the company’s cyber security team
- Advocate for all company security-related issues
- Oversee management of information security tools, contracts, documentation, standards, and processes
- Collaborate with software engineering teams to integrate and automate security at every level of the software development lifecycle
- Stay continually informed about the latest developments in the security field, including mitigation strategies, threats, tools, attack vectors, and cutting-edge preventative measures
- Perform IT Risk Assessments and IT Audits
- Perform threat modeling, design, and code reviews to assess security implications.
- Evaluate, architect, build and monitor security infrastructure for use by security and crew at home, in an office, on the water, in a data center and in cloud environments such as AWS and Azure
- Help establish the right security and governance practices and conduct audits.
- Clearly communicate security strategy to senior stakeholders.
- Ensure compliance with government related regulations and industry standards
- Perform incident response planning, generate and maintain playbooks and runbooks for the entire incident response lifecycle
- Lead and directly contribute to incident response workgroups
- Perform disaster recovery/business continuity planning, documentation, and testing
- Manage social engineering assessments and security awareness training
- Directly contribute to continuous vulnerability assessments including red team and blue team groups
Requirements & Qualifications:
- A bachelor’s degree in Computer Science/Information Technology. Masters preferred.
- 10 years’ experience developing and managing Cyber Security for companies with large, distributed networks with 40 servers and 2,000 users
- In-depth understanding of Security Information and Event Management systems and common security tools such as Splunk, OSSEC, Burp Suite, Nmap, Nessus, or Metasploit
- Experience with SSO and major federated Identity providers and access flows
- Distributed global security infrastructure experience
- Experience with cloud security models
- Direct experience with the following regulatory environments: ISO 27001, GDPR, and PCI-DDS
- At least one but preferably a couple of the following certifications: CISSP, CISM, or CISA
- Additional certifications in CompTIA Security , CEH, CCSP or MS 365 Certified: Enterprise Administrator Expert are a plus
- Strong knowledge of NIST CSF, MITRE ATT&CK governance models
- Strong knowledge of OWASP and CWE vulnerability frameworks
- Experience in security threats and vulnerability management that include Threat profiling, assessing impact and remediation and reporting of vulnerabilities
- Thorough understanding of networking (Switches, routers, firewalls and Load balancers) operating systems and intrusion detection/prevention and firewall technologies
- Proven implementation of cloud security models, particularly identity, network and encryption.
- Must be a self-driven, motivated senior IT professional with strong analytical and problem-solving skills, and leadership/good executive presence
- Excellent written and documentation skills including proof reading and attention to detail.
- Highly collaborative, accountable and results driven
About Us:
City Experiences’ passion is to provide amazing experiences on land and water. Our 40-year success through organic growth and acquisitions has resulted in a portfolio of over 25 brands that welcome upwards of 30 million guests/riders annually. If you’re an enthusiastic team player who thrives in an environment where communication, creativity, and cooperation are encouraged, this may just be the opportunity for you.
The RESPECT Service System embodies City Experiences’ mission, vision, values and operating principles. By creating a company culture that puts RESPECT at its core, we believe it will drive us to achieve our goal of becoming a Global Experiences and Transportation Leader.
City Experiences is proud to be an Equal Employment Opportunity and Affirmative Action employer. We prohibit discrimination and or/harassment of any type, including but not limited to discrimination and or harassment based upon race, religion, religious creed, color, national origin, ancestry, citizenship, sex, sexual orientation, gender, gender identity, gender expression, age, pregnancy or relation medical conditions, childbirth, breastfeeding, parental status, veteran and/or military statue, disability (physical or mental) medical condition, genetic information or characteristics, political affiliation, domestic violence survivor status, marital status, or other characteristics prohibited by federal, state, or local law. Additionally, City Experiences participates in the E-Verify program in certain locations.