Information Security Systems Manager

Ramboll•Cincinnati, NY

1d•Hybrid

About The Position

Reporting Globally. Based Geographically. This position is based in the USA, the location is negotiable. East Coast location preferred. USA citizenship is required for this role. Are you eager to develop your excellence in an inclusive, collaborative, and empowering community? Are you excited about joining a company that strives to make a difference – for its employees, clients, and society? If so, we invite you to bring your knowledge of Information Technology and Information Security into play as you help Ramboll globally develop its national information security obligations, working within an ISO27001 compliant framework. Reporting to the Global Business Partners - Information Security & Data Compliance Manager. The role will allow the successful candidate to develop their existing security knowledge working with the business and global enterprise Architects developing Information Security compliance for Ramboll. To succeed in this role, you must have a strong background in Information Technology and a willingness to develop your skills in Information Security. You must have a hands-on approach and be prepared to be involved in both the strategic direction of IT security as well as the setting of policies as well the technical and practical aspects of running compliance audits, investigations, and IT forensics. As our new Information Security Systems Manager, you will join our Global Business Partners - Information Security & Data Compliance Team, reporting to the CISO. Limited international travel may be required. You will be part of Global Business Team providing outstanding support to the national businesses. The National Information Management team has a strong can-do attitude and supports all its team members to deliver sustainable solutions on behalf of Ramboll. Working in Ramboll’s CISO department provides the opportunity to be involved in exciting, cutting-edge projects and to engage with all aspects of the business both in country and globally.

Requirements

Solid understanding of cyber and information security and IT compliance
Experience with NIST SP 800-171, DFARS, CMMC, and ITAR
Experience with US Department of Defense (DoD), US Department of Energy (DoE) or other US federal agencies
Knowledge of current security risks, threats, and vulnerabilities.
Must already hold or be willing to obtain Security Clearance at both the baseline and enhanced level in the USA.
USA citizenship is required for this role.

Responsibilities

Ensure the CMMC Level 2 certification for an existing Level I Enclave, including an external audit
Interface with contractors / consultants to support CMMC level 2 certification
Maintain enclave operation and governance
Participate in the development of an Americas based disaster recovery plan and simulations
Oversee the completion of client surveys regarding Ramboll cyber security
Participate in a team to establish an Americas data residency policy based on client contractual terms
Interface with Project teams to develop procedures to meet client cyber security requirements
Support the planning, researching, and developing of security policies, standards, and procedures
Support the development of and maintain a security process’s that enables the business to develop and implement security solutions and capabilities that are clearly aligned with business, technology and threat drivers
Participate in designing secure networks, spaces, systems, and application architectures
Support the development of and run processes for disaster recovery, human risk, computer forensics, compliance audits and information risk management
Work closely with Enterprise Architects and Solutions Architects to ensure constant focus on Information Security issues
Conduct security assessments of internal systems, spaces, applications, and IT infrastructure as part of the overall risk management practice
Perform audits, facilitate external audits, and determine whether we need to alter our procedures to comply with national regulations and support the external audit process for national legislative and regulatory compliance. Including such things as NIST SP 800-171, DFARS, CMMC, and ITAR others as denoted by jurisdiction.
Participate in meetings with managers at all levels of the organization to ensure data privacy by design