Cybersecurity Controller

$125,000 - $150,000/Yr

Aesc - Santa Clara, CA

Full-time - Mid Level

Santa Clara, CA

Professional, Scientific, and Technical Services

About the position

AESC is looking to add a Cybersecurity Controller to our team in Smyrna, TN, Santa Clara, CA, Florence, SC, or Bowling Green, Kentucky. This is a full-time hybrid/on-site position. The Cybersecurity Controller will play a crucial role in safeguarding our organization's digital assets by proactively monitoring and responding to cybersecurity threats and incidents. You will report directly to the Director of Global Cybersecurity, who brings many years of IT leadership. In this role, you will have the opportunity to lead, mentor, and collaborate with your colleagues to drive impactful results. Our team values creativity, initiative, and a collaborative spirit, and we look forward to welcoming you to this dynamic work family where your contributions will play a vital role in achieving our common goals. The responsibilities of the Cybersecurity Controller include designing and maintaining the overall cybersecurity architecture, ensuring it aligns with industry best practices and relevant frameworks. You will develop and implement a comprehensive cybersecurity framework to protect the organization's digital assets. Additionally, you will lead the creation of cybersecurity policies, procedures, and guidelines, covering areas such as data protection, access control, incident response, and encryption. You will also establish and maintain cybersecurity standards for the user community, cybersecurity team, and leadership, ensuring alignment with industry regulations and frameworks. Moreover, you will identify, define, and implement security controls to protect against cybersecurity threats and vulnerabilities. You will collaborate with the Cyber Security Responders to ensure that security controls are effectively deployed and monitored. Developing and delivering cybersecurity training and awareness programs for employees will be part of your responsibilities, fostering a culture of security within the organization. You will also collaborate with the Cyber Security Responders to establish and maintain an effective incident response plan, defining incident response processes and procedures, and conducting regular drills and simulations. Staying current with emerging cybersecurity technologies and tools will be essential, as you will evaluate their potential impact on the organization's security posture and recommend and implement security solutions that enhance our cybersecurity capabilities.

Responsibilities

• Design and maintain the overall cybersecurity architecture, ensuring alignment with industry best practices and relevant frameworks.
• Develop and implement a comprehensive cybersecurity framework to protect the organization's digital assets.
• Lead the creation of cybersecurity policies, procedures, and guidelines covering data protection, access control, incident response, and encryption.
• Define mechanisms and processes for the effective enforcement of cybersecurity policies throughout the organization.
• Establish and maintain cybersecurity standards for the user community, cybersecurity team, and leadership, ensuring alignment with industry regulations and frameworks.
• Oversee compliance efforts related to NIST, ISO 27001, TISAX, IATF:16949, and other relevant standards, conducting regular audits and assessments.
• Identify, define, and implement security controls to protect against cybersecurity threats and vulnerabilities.
• Collaborate with the Cyber Security Responders to ensure that security controls are effectively deployed and monitored.
• Develop and deliver cybersecurity training and awareness programs for employees, fostering a culture of security within the organization.
• Collaborate with the Cyber Security Responders to establish and maintain an effective incident response plan, defining incident response processes and procedures, and conducting regular drills and simulations.
• Stay current with emerging cybersecurity technologies and tools, evaluating their potential impact on the organization's security posture.
• Serve as the liaison between the Cyber Security Responders and internal auditors, providing insights into security controls and compliance.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or a related field (Master's degree preferred).
• Extensive experience (10+ years) in cybersecurity roles, with a focus on security architecture, policy development, and standards enforcement.
• In-depth knowledge of cybersecurity frameworks, including NIST, ISO 27001, TISAX, IATF:16949, and other relevant standards.
• Strong understanding of security controls and their implementation.
• Excellent analytical and problem-solving skills.
• Proven ability to create and enforce cybersecurity policies and procedures.
• Relevant certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA), are highly desirable.
• Effective communication and collaboration abilities, with the capacity to work across multiple teams and levels of the organization.
• Strong project management skills and the ability to manage multiple initiatives simultaneously.
• Experience with security technologies and tools, including intrusion detection systems, firewalls, and SIEM solutions.

Nice-to-haves

• Knowledge of cybersecurity, engineering, ethical hacking tools and methods.
• Familiar with big data technologies, SQL, python, analytic software packages and software engineering environments.
• Knowledge of GDPR and other privacy frameworks (including China, Japan, UK, US, and France).
• A desire to constantly improve the company's global security position.

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Disability insurance
• Flexible spending account
• Health insurance
• Health savings account
• Life Insurance (Company paid and additional voluntary life available)
• Paid Vacation and 14 Paid Holidays
• Short term and long-term disability coverage (Company Paid)
• Tuition reimbursement