Skip to main content

This job has expired

Director, Cybersecurity Governance and Deputy CISO

Employer
Washington Metropolitan Area Transit Authority
Location
Washington D.C
Closing date
Jul 20, 2019

Job Details

The Washington Metropolitan Area Transit Authority (Metro) is building a state-of-the-art cybersecurity program to better protect the critical transit infrastructure supporting our nation's capital. The Deputy Chief Information Security Officer (DCISO) shall lead the governance directorate of the program. The governance program includes internal and external audits, corporate cybersecurity policy, risk assessments, training and career development, corporate cyber scorecarding, financial management, and supply chain security. The DCISO should bring a deep understanding of the NIST Cybersecurity Framework (CSF), Risk Management Framework (RMF), security operations and analytics in order to grow a governance program that unites cyber with the information and operational technology (IT/OT) found in a large critical infrastructure organization. The DCISO must be able to develop, implement, and lead strategic plans/efforts that require cross-departmental leadership buy-in and support. The DCISO shall represent WMATA and the CISO in building partnerships with peer transportation agencies, federal, state and local government agencies and at industry conferences as an expert in surface transportation cybersecurity.

Minimum Qualifications

Education
  • A Bachelor's Degree in Computer Science, Cybersecurity or a related field.

Experience
  • Ten (10) years of experience managing cybersecurity for a large organization with detailed experience one or more of the following cybersecurity areas: operations and monitoring, risk management, or governance.

Preferred

Education
  • A Master's Degree in Cybersecurity or IT Management

Certification/Licensure

One or more of the following:
  • CompTIA Security+ (SY0-401)
  • (ISC)² Certified Information Systems Security Professional (CISSP)
  • (ISACA) Certified Information Security Manager (CISM)
  • GIAC Security Essentials (GSEC)
  • EC-Council Certified Ethical Hacker (CEH)

Medical Group

Satisfactorily complete the medical examination for this position, if required. The incumbent must be able to perform the essential functions of this position either with or without reasonable accommodations.

Job Summary

The Director, Cybersecurity in partnership with two other Directors, manages a team of cybersecurity professionals in the protection of critical transportation infrastructure for WMATA across the national capital region. The incumbent oversees functions including cyber operations, threat intelligence, engineering, architecture, governance, system authorizations and risk management. The Director designs and implements strategic and tactical cybersecurity plans that integrate with larger IT goals and WMATA's mission to deliver safe and reliable services to the public.

Essential Functions
  • Leads teams of cybersecurity professionals across a broad range of disciplines including risk management, compliance/audits, incident response, security tools, analytics, threat hunting/emulation, security engineering, monitoring/detection, governance, training, and policy creation and implementation. Ensuring compliance with the National Institute of Standards and Technology (NIST) and other applicable policies, laws and governing frameworks.
  • Continuously refines the cybersecurity program by developing innovative strategies and tactical plans across a wide array of cybersecurity programs, leveraging the latest industry research, threat analysis, and lessons learned from internal practices. Ensures that WMATA's cybersecurity program is best-in-class.
  • Develops a professional cadre of cybersecurity experts through mentorship, creating and facilitating professional development opportunities, and quality reviews and feedback of work. Ensures that employees are challenged and provided opportunities to keep pace with continuously evolving cyber threats.
  • Designs, refines, implements and manages a risk-based, repeatable/consistent system security strategy based on the NIST Risk Management Framework(RFM)/Cybersecurity Framework which includes: control selection, system authorization, documenting, and remediating vulnerabilities, managing a Governance Risk and Compliance (GRC) tool, partnering with developers and stakeholders to ensure security is a part of the complete system development life cycle, and continuous monitoring. Ensures that WMATA maintains a thoughtful risk-management framework applied to all systems and applications.
  • Conducts internal security audits of all aspects of the IT architecture for compliance and to determine where vulnerabilities exits, translating findings into Plans of Action and Milestones. Coordinates external audits to ensure WMATA has an effective compliance program that supports risk-prioritized remediation efforts.
  • Leads security monitoring of all environments and incident response to cyber-attacks by: designing comprehensive plans, managing routine exercises, partnering with threat experts and law enforcement, designing and managing a holistic cyber fusion and security operations center, working with external vendors, as well as building and leveraging threat intelligence and analytics programs. Ensures that WMATA has a comprehensive threat monitoring and response program capable of rapidly detecting and responding to attacks.
  • Creates and oversees threat hunting and emulation ("red/blue") efforts designed to detect and repair vulnerabilities across the enterprise based on a strategy tethered to risk and larger corporate future IT goals. Determines where WMATA's architecture lacks sufficient security controls that could be exploited by an adversary.
  • Oversees (designs architecture/integration, procure, configure, manage) a comprehensive suite of security tools and monitoring technologies based on a continuous review of industry tools, security architecture designs, and gaps in the environment to support system authorization. Continuously monitors threat detection and response, hunting, compliance, and related enterprise-level security activities. Ensures that WMATA has a comprehensive set of tools that integrate effectively and keep pace with evolving threats.
  • Develops and manages a dashboard of the enterprise cybersecurity posture depicting weaknesses and corrective activities, by compiling, reviewing and analyzing data from various tools and reporting sources.
  • Develops and manages an innovative and current cybersecurity training and awareness program that looks both internally at developing professionals in the field and educating employees across WMATA. Ensures employees at all levels receive training to prevent security mishaps and build a stronger industry-leading workforce.
  • Develops comprehensive cybersecurity policy that ties to larger IT policy, integrates with security architecture, anticipates future risk areas, and is based on industry-leading best practices, policy and laws. Ensures that WMATA has policy that guides the organization, manages compliance and risk, and defines key roles and partnerships.

The essential duties listed are not intended to limit specific duties and responsibilities of any particular position. Nor is it intended to limit in any way the right of managers and supervisors to assign, direct and control the work of employees under their supervision.

Evaluation Criteria

Consideration will be given to applicants whose resumes demonstrate the required education and experience. Applicants should include all relevant education and work experience.

Evaluation criteria may include one or more of the following:
  • Personal Interview
  • Skills Assessments
  • Verification of education and experience
  • Criminal Background Check
  • Credit history report for positions with fiduciary responsibilities
  • Successful completion of a medical examination including a drug and alcohol screening
  • Review of a current Motor Vehicle Report

Closing

Washington Metropolitan Area Transit Authority, a Federal contractor, is an Equal Opportunity / Affirmative Action employer. All qualified applicants receive consideration for employment without regard to race, color, creed, religion, national origin, sex, gender, gender identity, age, sexual orientation, genetic information, physical or mental disability, or status as a protected veteran, or any other status protected by applicable federal law, except where a bona fide occupational qualification exists. Our hiring process is designed to be accessible and free from discrimination.

This posting is an announcement of a vacant position under recruitment. It is not intended to replace the official job description. Job Descriptions are available upon confirmation of an interview.

Company

The Washington Metropolitan Area Transit Authority operates the second largest rail transit system and the fifth largest bus network in the United States. Safe, clean and reliable, "America's Transit System" transports more than a third of the federal government to work and millions of tourists to the landmarks in the Nation's Capital.

Metro has earned a worldwide reputation for security and architectural beauty. WMATA is clearly the employer of choice for over 10,000 area residents. The Authority was created in 1967 by an interstate compact to plan, develop, build, finance and operate a balanced regional transportation system in the National Capital area. Construction of the Metrorail system began in 1969. Four area bus systems were acquired in 1973. The first phase of Metrorail began operation in 1976. The final leg of the original 103-mile rail network was completed in early 2001. Metrorail now operates 83 stations. One line extension and three new stations are now under construction.

Metrorail and Metrobus serve a population of 3.4 million within a 1,500-square-mile area. The transit zone consists of the District of Columbia, the suburban Maryland counties of Montgomery and Prince George's and the Northern Virginia counties of Arlington, Fairfax and Loudoun and the cities of Alexandria, Fairfax and Falls Church. Overall, about 40 percent of the region's residents commute to work on Metro.

Metro and the federal government are partners in transportation. Half of the 83 Metrorail stations serve federal facilities and 36 percent of the local federal workforce uses Metro. We are committed to being an integral part of the Washington metropolitan area by ensuring the best in safe, reliable, cost-effective and responsive transit services, by promoting regional mobility and by contributing toward the social, economic and environmental well-being of our community. Employees are Metro.; We are committed to providing a working environment that fosters a high standard of performance, recognition for contributions and innovations, mutual respect and a healthy quality of life.

We are committed to developing ourselves through technology, training and education. We recognize our diversity as a source of strength that enables us to attain individual and Authority goals. In addition to competitive salaries, Metro employees enjoy a number of attractive benefits. These benefits include paid time off in the form of vacations, holidays and sick leave; medical, dental, life insurances as well as long term disability. Retirement is planned for through a defined contribution plan and a deferred compensation plan. Alternative work schedules, teleworking and free transportation on Metrorail and Metrobus make for an great benefits package for WMATA employees.Jump to our website to apply online for current openings and save the link for future vacancies as they occur.http://content.wmata.com/jobs/employment_opportunities.cfm

 

 

Company info
Website
Location
600 Fifth St. NW
Washington
DC
20001
US

Get job alerts

Create a job alert and receive personalized job recommendations straight to your inbox.

Create alert