Sr. Mgr. Information Security

VIAVI Solutions•San Jose, CA

20h

About The Position

Responsible for the planning, design and build of security architectures; oversees the implementation of network and computer security and ensures compliance with corporate cybersecurity policies and procedures. Monitors cybersecurity requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related network devices. Performs security assessments of applications and systems using penetration and vulnerability testing and risk analysis. Configures and installs firewalls and intrusion detection systems. Implements software fixes (patches) to remove system vulnerabilities. Responds immediately to cybersecurity-related incidents and provides a thorough post-event analysis. Investigates intrusion incidents and conducts forensic investigations. We have an exciting opportunity for someone to lead the strategy and oversight of VIAVI’s cyber security program. You will be responsible for managing the security posture of information systems and data, governing security policies and managing risk through robust security measures. You will work closely with cross-functional teams to execute security assessments, monitor vulnerabilities and move forward our compliance initiatives.

Requirements

planning, design and build of security architectures
implementation of network and computer security
compliance with corporate cybersecurity policies and procedures
monitoring cybersecurity requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related network devices
security assessments of applications and systems using penetration and vulnerability testing and risk analysis
configuration and installation of firewalls and intrusion detection systems
implementation of software fixes (patches) to remove system vulnerabilities
immediate response to cybersecurity-related incidents and thorough post-event analysis
investigation of intrusion incidents and forensic investigations
managing the security posture of information systems and data
governing security policies
managing risk through robust security measures
execution of security assessments
monitoring vulnerabilities
compliance initiatives
global cyber risk management framework
cybersecurity compliance initiatives including ISO 27001 certification, DFARS/CMMC, Cyber Essentials
customer audits/security surveys
data loss prevention
planning and execution of implementing a Security Operations Center
risk management activities including threat intelligence, vulnerability management, and supplier risk
proactive security culture across VIAVI’s global workforce, including training, education, and executive engagement
ensure security is embedded across the enterprise
Corporate Incident Response Plan and testing

Responsibilities

Collaborate with the InfoSec team and drive the enterprise-wide information and cyber security strategy across the company.
Provide advisory and insights into aspects of security operations, governance, architecture, engineering and incident response to protect systems, networks, and our data
Support the InfoSec team in the modernization of VIAVI’s security environment
Lead the global cyber risk management framework, aligning with regulatory requirements and business risk appetite
Manage cybersecurity compliance initiatives including ISO 27001 certification, DFARS/CMMC, Cyber Essentials and respond to customer audits/security surveys as necessary.
Drive efforts to rollout data loss prevention across the organization.
Lead the planning and execution of implementing a Security Operations Center.
Provide thought leadership for risk management activities including threat intelligence, vulnerability management, and supplier risk.
Champion a proactive security culture across VIAVI’s global workforce, including training, education, and executive engagement
Work cross functionally to ensure security is embedded across the enterprise
Provide insights to the Corporate Incident Response Plan and testing