Manager, Cybersecurity
Full Time
Burbank, CA 91504
Posted
Job description
Job Title: Manager, Cybersecurity
Department: I.T.
Reports To: Chief Information Officer
FLSA: Exempt
Status: Full-Time
Salary: $150,000-$165,000
ABOUT CONTRACT SERVICES:
In the mid-1960s, the major film studios, in negotiations with Hollywood’s unions, founded the non-profit Contract Services Administration Trust Fund (CSATF) and later added Contract Services Administration Trust Training Fund (CSATTF), now collectively referred to as Contract Services (CS). Their charge is to administer apprenticeship, training, and safety programs, maintain seniority rosters, and implement other industry-wide services, studies and/or education. They exist to carry out certain requirements of the collective bargaining agreements between the film and television industry’s West Coast Studio Local Unions and the Alliance of Motion Picture and Television Producers (AMPTP), which govern the employment conditions of a freelance union workforce of approximately 50,000 people in the greater Los Angeles area.
CS serves as a conduit to carry out a long list of regulatory and legal obligations that must be implemented on behalf of the studios. Consolidating these functions under the CS roof creates opportunity for identifying collective solutions, as well as enormous time and cost savings for all stakeholders. Without CS, each employer would need to perform its own basic safety training, manage its own Substance Testing Programs for drivers of regulated motor vehicles and maintain individual studio rosters, all of which would be operationally impractical in the context of a freelance workforce. Because CS performs these functions on behalf of the studios, it saves them an enormous amount of money, time, and administrative burden — all of which would gridlock production schedules. CS also alleviates the burden on individual employees, who would otherwise have to participate in many duplicative administrative processes and training programs for each studio employer.
The CS mission is to provide friendly, accurate and dependable service and training for the entertainment industry (producers, studios, unions, and guilds) and the behind-the-scenes workers as required by union contracts, the law and individual need - supporting the industry through maintaining various rosters, processing roster applicants, offering quality safety, harassment prevention and skills training, facilitating the creation and maintenance of industry safety bulletins, validating documents, securely maintaining records and much more.
Training that keeps workers safe on set is critical to this important mission. CS’s Safety Pass training program is second-to-none in terms of breadth, relevance, and quality. This helps the studios maintain their strong safety record and they believe it has helped save lives.
Though they act as one, structurally, CS is composed of two separate tax-exempt trust funds — CSATF and CSATTF — which are governed by two boards of trustees, the members of which are appointed by the AMPTP. CSATF is a tax-exempt business league under Internal Revenue Code Section 501(c)(6). CSATTF is a tax-exempt labor organization under Internal Revenue Code Section 501(c)(5) and an apprenticeship plan subject to the Employee Retirement Income Security Act (ERISA).
Additional Information about CS can be found here:
Website: https://www.csatf.org
JOB SUMMARY:
Contract Services seeks a highly skilled Manager, Cybersecurity to join our IT team. You will be responsible for managing the cybersecurity team. The team is responsible for developing and implementing security policies, ensuring compliance with industry regulations and standards, detecting, identifying, and responding to cyber events, threats, security risks and vulnerabilities. You should be a detail-oriented problem solver, a self-starter who enjoys a challenge, and a good communicator who loves collaborating and brainstorming. You will also need to understand the business and be an advisor on how best to securely handle sensitive data.
KEY DUTIES AND RESPONSIBILITIES:
- Develop and implement a comprehensive cybersecurity strategy that aligns with the organization's goals and objectives.
- Work with the cybersecurity team to identify tools and review relevant vendors to meet various cybersecurity needs.
- Effectively communicate with stakeholders and executive management on new or updated cybersecurity protocols and policies.
- Coordinate with the IT Engineering team on software engineering security best practices in a hybrid environment (AWS, on-premises, and datacenter).
- Analyze processes, risks, and controls in the IT environment to identify improvement opportunities, recommend actions, and partner with teams to resolve deficiencies.
- Develop and implement incident response plans and procedures to respond to security incidents quickly and effectively.
- Collaborate with other departments and stakeholders to integrate security into all aspects of the organization's operations.
- Responsible for development and implementation of cybersecurity education programs to ensure the entire organization is aware of common threats and how to avoid them.
- Ensure all production security controls and technologies operate in compliance with all established polices and SLAs, across all aspects of the security operating framework.
Configure, maintain, and optimize technology solutions and systems that provide security for company systems, networks, and data.- Provides detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities.
- Manage security incidents (e.g., coordinate documentation, work efforts, resource utilization within the organization) from inception to final after-action reporting.
- Test, implement, deploy, maintain, review, and administer policies and configurations that are required to effectively manage the cyber defense infrastructure and resources.
- Stay current on emerging threats and technologies in the cybersecurity landscape and make recommendations for incorporating new technologies.
- Communicate effectively with executive leadership, stakeholders, and the broader organization on cybersecurity risk and incidents.
- Special assignments and projects as directed by the Chief Information Officer.
THE IDEAL CANDIDATE HAS:
Core Skills:
- Ability to create, review, and update procedures / documentation to lead an effective cybersecurity team.
- Manage and mentor a small team of cybersecurity engineers to ensure skillset alignment.
- Demonstrates continuous effort to improve team performance, streamline work processes and work cooperatively and provide quality seamless customer service.
- Comfortable working with and advising business and IT stakeholders on information security best practices.
- Strong verbal and written communication skills to convey the right message depending on the audience.
Skill Pluses:
- Experience with Amazon Web Services, Salesforce, and Mulesoft security best practices.
- Working knowledge of New Relic, Splunk, DarkTrace, Wireshark.
- Comfortable in networking technology including, but not limited to subnetting, Vlan switching, inter-Vlan routing, access control list, static routing, policy-based routing/forwarding, OSPF/BGP, DNS and DHCP.
- Relevant cyber security certifications, such as CSIM or CISSP.
Personality:
- Positive mental attitude, strong work ethic, self-motivated, and highly organized.
- Ability to work independently and as part of a collaborative team.
Engagement:
- Active participant in company culture and a desire to teach, learn and grow.
- Willingness to understand our business and how we can best serve our clients.
EDUCATION/EXPERIENCE/MINIMUM REQUIREMENTS:
Education
- Bachelor's Degree in Computer Science, Information Security, Software Engineering, or Information Technology from an accredited institution.
Experience
- Minimum 5 years of experience in cybersecurity and at least 3 years of experience in a leadership role.
PHYSICAL REQUIREMENTS/WORK ENVIRONMENTS:
This position will work partially on-site in our Burbank office, as well as from home.
caravetterealestate.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, caravetterealestate.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, caravetterealestate.com is the ideal place to find your next job.