Digital & Technology Risk Manager Cbre
Richardson, TX

Job Description

Position Summary

This technical individual will be a direct report to the Vice President of Governance, Risk and Compliance, and will be responsible for enhancing the risk mitigation enablement with other D&T teams by optimizing operational soundness and technical enhancement of risk, security and compliance of Cyber Security solutions. The individual will help define and implement a risk driven approach to ensure effective management of daily operational activities related to governance, risk and compliance -ensuring that adequate prevention mechanisms and response procedures exist and are operationally sound.

Key Responsibilities

* Organize, manage and lead a newly formed technical risk management team developing strategies, solutions and methodologies to optimize operational soundness and elevate risk and compliance reporting from Cyber Security solutions, such as:
* Configuration Drift Program
* Privacy/Data Management - Varonis, Symantec DLP
* Identity and Access Management - Sailpoint
* Patch Management - Windows Server, LINUX
* Threat and Vulnerability - Rapid7
* Responsible for developing risk-based use-cases and playbooks, and for coordinating, facilitating and leading risk response actions.
* Produce reports and briefs to provide an accurate depiction of the current risk landscape.
* Utilize various Cyber Risk sources, to modify existing monitoring capabilities, functions, prevention mechanisms and response processes to account for the changing threat landscape
* Assess known internal vulnerabilities, exposures and prior incidents in order to recommend technical and non-technical measures risk mitigation strategies to protect the organization.
* Role has the potential for expansion of capabilities, responsibilities and promotion based on the ability to lead, execute and deliver results.

QUALIFICATIONS

Key Knowledge and Skill Requirements

* Extensive experience as a high performer with a track record of driving innovation and business value, with defined objectives and measures for success.
* Demonstrated experience in leading global scope programs, and the challenges associated with working in a global geographically dispersed enterprise.
* Attested ability to develop effective operating model for cyber threat detection, analysis and response functions using internal and outsourced partnerships.
* Expertise in analyzing the intersection of regulatory, political and geopolitical developments with cyber security threat vectors and policymaking.
* Expert level knowledge of network and infrastructure system devices, protocols, mechanisms and management; network and host-based security hardening techniques; security monitoring, metrics, and reporting.
* Highly motivated individual with ability to self-task, develop a cohesive team, coach, mentor and delegate appropriately.
* Excellent communication skills, including verbal, written and presentation.

Additional Qualifications / Experience

* Bachelor's Degree in Computer Science, Information Technology Management, or other technical discipline
* Minimum of 5 years information security experience, at least 6 of which must be in cyber threat management or cyber security operations management.
* Understanding of large, complex geographically dispersed corporate networking
* Ability to deliver succinct and fact-based communications, both verbally and in writing
* Attention to detail and high level of consistency in written work.
* Superb communications skills (written and verbal).
* Superb interpersonal skills.
* Able to communicate clearly and concisely with both technical and non-technical colleagues at all levels
* Two or more cyber security certifications such as CISSP, CISM, CISA, SANS GIAC, ITIL.