Lead Cyber Security Engineer @ Mycbgroup

The Lead Cybersecurity Engineer will primarily focus on:

• Identification and leading the efforts to counter security breaches and help reduce the likelihood of security incidents by taking a proactive stance on monitoring and alerting, then mitigation and/or remediation of threats.
• Define, plan, implement, maintain, and upgrade security and compliance policies, measures, and controls.
• Assist with the creation and implementation of a security awareness program(s) to raise the level of awareness and contribute positively towards threat prevention.
• Lead cybersecurity response by analyzing security and data breaches to identify causes and update incident response, disaster recovery, and business continuity plans, and work with the CB Group Data Protection Officer (DPO) to identify breaches and manage response.
• Ensure end-user compliance with company security policies.
• Evaluate Common Vulnerabilities and Exposures (CVE) and ensure vulnerabilities are addressed based on severity across the enterprise. This includes regular reviews of NIST databases.
• To evaluate emerging AI threats and develop a framework to provide a high level of assurances and risk mitigating process s part of a continuous risk management.
• Remain current with emerging trends and best practices, ensuring proposed solutions align with group strategic goals and performance needs.

Demonstrated Knowledge, Skills, Experience

• A first degree in computer science engineering or a related field.
• 3-5 years of demonstrated progressive experience in

IT Security, Cybersecurity and Compliance, or similar role, where supervisory experience would be an asset.

• Demonstrated experience with ISO27001, NIST CSF, and security governance frameworks is desired.
• Experience with FORTINET and CISCO enterprise networking and security devices would be a plus.
• Ability to work in a high-stress environment as the subject matter expert on cybersecurity to plan, mitigate, and lead the cybersecurity response.
• Solid networking knowledge is required (OSI network layers, TCP/IP)
• Certified in or experience working within the ITIL framework for service delivery would be an asset.
• Advanced security certification and/training and experience with common tools for threat detection and management is required.

Specific challenges and working conditions

• Remote support options are to be prioritized and implemented in coordination with the applications support team where feasible to reduce technical site visits.
• Ability to travel to locations across Jamaica for any required on-site advanced support, site visits to learn the business operations as needed, and can include after-hours, weekends, and/or public holidays as necessary to ensure business processes that depend on the application are fully operational, to meet business and customer demands.