Role Purpose
To monitor tasks and activities to ensure that SANS Cybersecurity and Data Protection Strategy Programs are run to completion, by combining project management and by managing all on-going projects from project initiation through to execution, reporting and closure activities, and provide advice on technical, compliance and controls that need to be enhanced or deployed within the set KPIs, agreed budgets and adopted policies and procedures as well as applicable regulatory requirements.
Key Accountability Areas
Key Activities
Cybersecurity Planning
- Operate as a project consultant to ensure business requirements are met to include collecting data, delivering and problem resolution
- Manage several projects to perform continuous monitoring/review of the scheduled implementation and overall health and completion
- Act as a single point of contact for all stakeholders (Cybersecurity and Data Protection project teams, 3rd parties and providers, management) to track performance, issues, and completion of the Strategy Program and roadmap.
- Developing all Cybersecurity and Data Protection project management activities throughout the project’s lifecycle, including but not limited to: Produce the business case., Review the necessary documentation (e.g., project plan, project charter, contract agreement, and project closure report).
- Manage all financial activities related to the Cybersecurity and Data Protection projects, including but not limited to: Creating Purchase Requests (PR), Handling change requests., Ensuring the receiving of services and subsequently processing the payment
- Control project risks and the development of risk mitigation activities in collaboration with the relevant internal stakeholders
- Provide timely and concise communications to business and technical leadership regarding project status and pending issues; analyzes processes and makes recommendations for optimizing resources and project delivery.
- Participate in identifying project costs, resource allocation, project schedule changes and issues escalation and interacts with IT personnel, business personnel, vendors, consultants, and other contractors at various levels, including executives
- Maintain a records for all cybersecurity and data protection projects,
Policies, Processes and Procedures
- Conduct day-to-day activities while ensuring compliance to policies and procedures
- Contribute to the identification of opportunities for continuous improvement of systems, processes taking into account leading practices, changes in business environment, cost reduction and productivity improvement
Knowledge and Experience
- Minimum to No prior experience in Cybersecurity Planning management.
Education and Certifications
- Bachelor’s Degree in Computer Science, Engineering, Information Systems (or other relevant technical disciplines).
- Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials.
- PMP certificate is preferred.
