Remote Risk Jobs in Macedonia, OH (NOW HIRING)

Stefanini Group is hiring!

Stefanini is looking for a Senior Cyber Security & Infrastructure Lead  - Remote; 1-2 days/month in the Cuyahoga Falls, OH 44223 corporate office

For quick Apply, please reach out to Maria Teresa Paje, call 248 263 8623/ email: MariaTeresa.Paje@stefanini.com

Job Title: Senior Cyber Security & Infrastructure Lead

Location: 3773 State Road, Cuyahoga Falls, OH 44223

(Remote; once or twice a month at the corporate office in Cuyahoga Falls, OH)

Certification required for cyber insurance 

Qualifications:

Required

• 10+ years of progressive information security or cybersecurity experience, including significant responsibility for enterprise security programs.
• Demonstrated experience leading cybersecurity strategy, governance, risk management, security operations, and incident response.
• Strong understanding of enterprise security architecture, network security, endpoint security, cloud security, identity and access management, and data protection.
• Experience implementing or operating cybersecurity programs aligned with the NIST Cybersecurity Framework or a comparable control framework.
• Demonstrated experience managing vulnerability remediation and cybersecurity risk across complex enterprise environments.
• Experience leading significant cybersecurity incidents and communicating effectively with both technical and executive audiences.
• Strong vendor-management and third-party risk-management capabilities.
• Demonstrated ability to operate effectively in an environment requiring both strategic leadership and hands-on problem solving.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline, or equivalent relevant experience.

Responsibilities:

Cybersecurity Strategy & Leadership

• Own and execute the enterprise cybersecurity strategy and multi-year security roadmap.
• Serve as the organization's senior cybersecurity subject-matter expert and advisor to IT and business leadership.
• Translate technical cybersecurity risks into clear business impact, priorities, and investment recommendations.
• Establish measurable security objectives, key risk indicators, and executive-level reporting.
• Develop business cases and recommendations for security investments based on risk reduction, business value, and total cost of ownership.

Governance, Risk & Compliance

• Lead the continued development and maturity of the enterprise cybersecurity program using the NIST Cybersecurity Framework and other applicable standards and leading practices.
• Maintain and enforce cybersecurity policies, standards, procedures, and control frameworks.
• Own the enterprise cyber risk assessment process and maintain visibility into material cybersecurity risks and remediation plans.
• Partner with Legal, Internal Audit, technology teams, and business stakeholders to support regulatory, contractual, insurance, and audit requirements.

Security Operations & Incident Response

• Provide leadership and oversight for enterprise security monitoring, detection, investigation, containment, and response.
• Maintain and continuously improve cybersecurity incident response plans, playbooks, escalation procedures, and crisis-management processes.
• Lead the organization's response to significant cybersecurity incidents and coordinate activities across technology, leadership, Legal, communications, and third parties as necessary.

Security Architecture & Engineering

• Partner with infrastructure, cloud, network, application, and enterprise architecture teams to embed security into technology design and operations.
• Provide security review and approval for significant technology initiatives and architectural changes.
• Establish and maintain appropriate security controls across identity and access management, endpoint security, networks, cloud environments, email, data protection, and enterprise applications.
• Promote secure configuration, least privilege, segmentation, encryption, and modern identity-security practices.
• Evaluate cybersecurity technologies and recommend changes based on capability, risk, cost, and operational effectiveness.

Security Awareness & Culture

• Own the enterprise cybersecurity awareness and education program.
• Develop targeted security education for employees, technology teams, privileged users, and executives.
• Use phishing exercises, awareness metrics, incident trends, and other data to identify and address areas of human risk.
• Build a culture in which cybersecurity is viewed as a shared business responsibility rather than solely an IT function.

Vendor & Partner Management

• Provide security oversight for strategic cybersecurity vendors, managed service providers, and technology partners.
• Establish performance expectations and hold providers accountable for service quality, risk reduction, and contractual obligations.
• Participate in vendor selection, contract reviews, renewals, and security-related negotiations.
• Identify opportunities to simplify the security technology portfolio and improve value from cybersecurity investments.

Stefanini takes pride in hiring top talent and developing relationships with our future employees. Our talent acquisition teams will never make an offer of employment without having a phone conversation with you. Those face to face conversations will involve a description of the job for which you have applied. We also speak with you about the process including interviews and job offers.

About Stefanini Group

The Stefanini Group is a global provider of offshore, onshore and near shore outsourcing, IT digital consulting, systems integration, application, and strategic staffing services to Fortune 1000 enterprises around the world. Our presence is in countries like the Americas, Europe, Africa, and Asia, and more than 400 clients across a broad spectrum of markets, including financial services, manufacturing, telecommunications, chemical services, technology, public sector, and utilities. Stefanini is a CMM level 5, IT consulting company with a global presence. We are CMM Level 5 company.