Log In
Sign Up
Role DescriptionJob Title:
Senior IT Security ManagerStarting date requestedNAIncumbent:
Business Unit/Division:
CorporateReports to:
IT Director Security & InfrastructureFunction:
ITNo.
of Direct Reports:
3+Location:
North AmericaAbout Constellium :
Constellium is a global aluminum manufacturing company with an employee-focused culture that develops innovative, value-added and recyclable and advanced aluminum products for a broad scope of markets.
Globally, we are over 12K employees strong, across over 25 manufacturing facilities in Europe, North America and China.
Our business units supply the aerospace, automotive, transportation and packaging markets.
Primary Purpose :
As a both a leader of the IT Security team as well as an individual contributor, this focus of this role is to drive and improve the Constellium technical security services.
Context:
This position is part of the Central IT Security team, which includes the following tasks:
The Central IT security team currently has two teams:
(1) one which is driving compliance and security awareness topics and (2) one which is driving technical topics such as incident response, end point protection, vulnerability management, etc.
This role leads the technical team.
Establishing and maintaining a centrally managed framework designed to protect confidentiality, integrity and availability of Constellium information as well as the IT systems supporting it Maintain an information security management system (ISMS) which includes:
Defining information security policies, standards and procedures Conducting continuous and annual information security risk assessment Implementing IT related controls that ensure data is adequately protected Ensuring that security incidents are properly managed and business continuity is promoted Implementing security awareness measures to enhance the security culture and develop a broad understanding of the requirements on Information Security Supporting information asset owners and managers in the definition and implementation of controls, processes, guidelines and supporting tools to comply with the policy Conducting information security assessments Reviewing and monitoring compliance with the policy statements and contributing to Internal Audit and Control processes Periodic reporting on security relevant topics to information security steering committee and relevant managementKey Accountabilities :
Own, operate and constantly improve our technical security services and processes such as:
IT security incident response process SIEM/SOC service Vulnerability management End-point protection KPI reporting Vendor management with our IT security vendors Oversee global IT initiatives that aim at improving our cyber-security Perform regular security reporting for the IT community as well as for the executive management Support in compliance and security awareness activities Engage in activities to continuously improve the security measures and processes Lead the technical security team, coach and develop employees, ensure adequate education Promote a safe working environment by being safety conscious at all times Other duties as assignedLeadership competencies, technical skills requirement:
BS or equivalent degree in Engineering, Computer Science or Information Assurance IT security industry certifications such as CISSP or CISM 10 years of experience in the IT Security preferably supporting larger manufacturing companies and in a matrix organization In-depth experience in IT security incident response in larger corporate environments Multiple years of solid experience in at least 4 of the following domains:
Information security management systems Policies, procedures and standards Compliance with at least one of:
ISO 27001/2, NIST 800-171 or SOX End point security solutions Network security including firewalls and VPNs Vulnerability management Encryption and cryptography Malware analysis and assessment Security investigations and forensics Experience in managing projects as a project manager Experience with working in globally distributed teams and work on projects or initiatives Leadership experience in a global/international and distributed environment Experience with convincing colleagues from other teams, functions or business units, to understand and follow security requirements and remediate deviations thereof Ability to work with and supervise external vendors Self-starter with ability to work autonomously and with discipline Comfortable with working in an international environment Very good soft, communication and collaboration skills Willingness to work hard in a fast changing and very demanding environment Interest in continuous improvement activities and methods such as Lean, ScrumComplexity:
Manage various information security topics and compliance requirements in an international, moving and decentralized environment.
Recommended Skills Aerospace Industries Assessments Auditing Automotive Industry Business Process Improvement Certified Information Security Manager Estimated Salary: $20 to $28 per hour based on qualifications.
Senior IT Security ManagerStarting date requestedNAIncumbent:
Business Unit/Division:
CorporateReports to:
IT Director Security & InfrastructureFunction:
ITNo.
of Direct Reports:
3+Location:
North AmericaAbout Constellium :
Constellium is a global aluminum manufacturing company with an employee-focused culture that develops innovative, value-added and recyclable and advanced aluminum products for a broad scope of markets.
Globally, we are over 12K employees strong, across over 25 manufacturing facilities in Europe, North America and China.
Our business units supply the aerospace, automotive, transportation and packaging markets.
Primary Purpose :
As a both a leader of the IT Security team as well as an individual contributor, this focus of this role is to drive and improve the Constellium technical security services.
Context:
This position is part of the Central IT Security team, which includes the following tasks:
The Central IT security team currently has two teams:
(1) one which is driving compliance and security awareness topics and (2) one which is driving technical topics such as incident response, end point protection, vulnerability management, etc.
This role leads the technical team.
Establishing and maintaining a centrally managed framework designed to protect confidentiality, integrity and availability of Constellium information as well as the IT systems supporting it Maintain an information security management system (ISMS) which includes:
Defining information security policies, standards and procedures Conducting continuous and annual information security risk assessment Implementing IT related controls that ensure data is adequately protected Ensuring that security incidents are properly managed and business continuity is promoted Implementing security awareness measures to enhance the security culture and develop a broad understanding of the requirements on Information Security Supporting information asset owners and managers in the definition and implementation of controls, processes, guidelines and supporting tools to comply with the policy Conducting information security assessments Reviewing and monitoring compliance with the policy statements and contributing to Internal Audit and Control processes Periodic reporting on security relevant topics to information security steering committee and relevant managementKey Accountabilities :
Own, operate and constantly improve our technical security services and processes such as:
IT security incident response process SIEM/SOC service Vulnerability management End-point protection KPI reporting Vendor management with our IT security vendors Oversee global IT initiatives that aim at improving our cyber-security Perform regular security reporting for the IT community as well as for the executive management Support in compliance and security awareness activities Engage in activities to continuously improve the security measures and processes Lead the technical security team, coach and develop employees, ensure adequate education Promote a safe working environment by being safety conscious at all times Other duties as assignedLeadership competencies, technical skills requirement:
BS or equivalent degree in Engineering, Computer Science or Information Assurance IT security industry certifications such as CISSP or CISM 10 years of experience in the IT Security preferably supporting larger manufacturing companies and in a matrix organization In-depth experience in IT security incident response in larger corporate environments Multiple years of solid experience in at least 4 of the following domains:
Information security management systems Policies, procedures and standards Compliance with at least one of:
ISO 27001/2, NIST 800-171 or SOX End point security solutions Network security including firewalls and VPNs Vulnerability management Encryption and cryptography Malware analysis and assessment Security investigations and forensics Experience in managing projects as a project manager Experience with working in globally distributed teams and work on projects or initiatives Leadership experience in a global/international and distributed environment Experience with convincing colleagues from other teams, functions or business units, to understand and follow security requirements and remediate deviations thereof Ability to work with and supervise external vendors Self-starter with ability to work autonomously and with discipline Comfortable with working in an international environment Very good soft, communication and collaboration skills Willingness to work hard in a fast changing and very demanding environment Interest in continuous improvement activities and methods such as Lean, ScrumComplexity:
Manage various information security topics and compliance requirements in an international, moving and decentralized environment.
Recommended Skills Aerospace Industries Assessments Auditing Automotive Industry Business Process Improvement Certified Information Security Manager Estimated Salary: $20 to $28 per hour based on qualifications.
