Cybersecurity Operations Leader

University of Miami - Miami, FL

Full-time - Senior

Miami, FL

Educational Services

About the position

The Cybersecurity Operations Leader at the University of Miami Health System (UHealth) is a pivotal role responsible for overseeing all aspects of security operations and support services. This position leads all cybersecurity incident response activities, directing internal teams in executing initiatives related to threat analysis, monitoring, systems, and applications. The incumbent will respond to all related cybersecurity alerts and support strategic IT initiatives, exercising considerable judgment in unprecedented situations. The role requires a proactive approach to managing daily operations, ensuring that departmental goals and objectives are met while supervising the performance management of all assigned staff, including decisions related to hiring, training, evaluation, promotion, and termination. In addition to managing daily operations, the Cybersecurity Operations Leader will assume responsibility for campus-wide initiatives involving computer support services. This includes developing, promoting, and maintaining standards related to technical support services and devices, as well as designing improved work systems by revising work standards, policies, and procedures. The leader will also direct and manage project plan development, risk assessment, communications, budget tracking, status reporting, vendor management, and successful project completion. Conducting network monitoring and intrusion detection analysis using various Computer Network Defense (CND) tools is a critical aspect of this role, as is correlating network activity to identify trends of unauthorized use. The incumbent will be responsible for providing incident response support to network subscribers, including mitigating actions to contain activity and facilitating forensic analysis when necessary. They will also test new computers, software, switch hardware, and routers before implementation to ensure security. Furthermore, the Cybersecurity Operations Leader will support the creation of business continuity and disaster recovery plans, conduct disaster recovery tests, and publish test results while making necessary changes to address deficiencies. The role involves contributing to the strategic plan and assisting in providing short- and long-term solutions to meet campus-wide strategic and tactical planning initiatives. Communication with administration and staff regarding the efficient and timely delivery of services is essential, as is performing follow-up investigations on inquiries, complaints, and problems. The leader will establish departmental goals and objectives, identify areas for improvement, and implement action plans to meet these goals. They will attend professional meetings, workshops, conferences, and seminars to stay abreast of technological advancements and continuously assess the effectiveness of internal controls within the unit, ensuring compliance with University policies and procedures. Training employees on controls and University policies is also a key responsibility of this role.

Responsibilities

• Oversee all aspects of security operations and support services.
• Lead all cybersecurity incident response activities.
• Direct internal teams in executing initiatives related to threat analysis, monitoring, systems, and applications.
• Respond to all related cybersecurity alerts and support strategic IT initiatives.
• Supervise performance management of assigned staff, including hiring, training, evaluation, promotion, and termination.
• Manage daily operations and direct staff to achieve departmental goals and objectives.
• Assume responsibility for campus-wide initiatives involving computer support services.
• Develop, promote, and maintain standards related to technical support services and devices.
• Design improved work systems by revising work standards, policies, and procedures.
• Direct and manage project plan development, risk assessment, communications, budget tracking, status reporting, vendor management, and successful project completion.
• Conduct network monitoring and intrusion detection analysis using various CND tools.
• Correlate network activity across networks to identify trends of unauthorized use.
• Review alerts and data from sensors and document formal, technical incident reports.
• Research emerging threats and vulnerabilities to aid in the identification of network incidents.
• Provide incident response support to network subscribers, including mitigating actions and facilitating forensic analysis.
• Test new computers, software, switch hardware, and routers before implementation to ensure security.
• Support the creation of business continuity/disaster recovery plans and conduct disaster recovery tests.
• Contribute to strategic planning and assist in providing short- and long-term solutions for campus-wide initiatives.
• Communicate with administration and staff regarding service delivery.
• Perform follow-up investigations on inquiries, complaints, and problems.
• Establish departmental goals and objectives, identify areas of improvement, and implement action plans.
• Attend professional meetings, workshops, conferences, and seminars to keep abreast of technological advancements.
• Assess the effectiveness of internal controls and ensure compliance with University policies.

Requirements

• Bachelor's degree in a relevant field; Master's in Computer Science, Information Security or related field preferred.
• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Security + certification.
• Certified Ethical Hacker certification.
• Cloud Security certification.
• 7+ years of experience in information security, especially on a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC).
• 7+ years of experience in another IT function, especially IT Audit.
• 7+ years of experience with regulatory compliance and information security management frameworks (e.g., ISO 27000, COBIT, NIST 800, etc.).
• Ability to react quickly, decisively, and deliberately in high-stress, high-impact situations.
• Ability to lead, motivate, develop, and train others.
• Skill in collecting, organizing, and analyzing data.
• Knowledge of business and management principles.
• Ability to direct, manage, implement, and evaluate department operations.
• Ability to establish department goals and objectives that support the strategic plan.
• Ability to effectively plan, delegate, and supervise the work of others.

Nice-to-haves

• Any appropriate combination of relevant education, experience, and/or certifications may be considered.

Benefits

• Competitive salaries
• Comprehensive benefits package including medical and dental insurance
• Tuition remission
• Paid time off
• Professional development opportunities