Cyber security analyst job description

Led by Rodolphe Saadé, the CMA CGM Group, a global leader in shipping and logistics, serves more than 420 ports around the world on five continents. With its subsidiary CEVA Logistics, a world leader in logistics, and its air freight division CMA CGM AIR CARGO, the CMA CGM Group is continually innovating to offer its customers a complete and increasingly efficient range of new shipping, land, air and logistics solutions.

Committed to the energy transition in shipping, and a pioneer in the use of alternative fuels, the CMA CGM Group has set a target to become Net Zero Carbon by 2050.

Through the CMA CGM Foundation, the Group also acts in humanitarian crises that require an emergency response by mobilizing the Group's shipping and logistics expertise to bring humanitarian supplies around the world.

Present in 160 countries through its network of more than 400 offices and 750 warehouses, the Group employs more than 130,000 people worldwide, including 2,900 in Marseilles where its head office is located.
Cybersecurity Risk Analyst (GRC)
MISSION:
Cybersecurity Risk Analyst (GRC) is responsible to facilitate the implementation of a comprehensive risk-based approach for the CMA CGM Group. This includes the steps of risk assessment, risk treatment and risk acceptance, while evolving methodology and internal processes.
Liaison with supply chain activities will be essential, in order to assess the level of security of critical suppliers, produce executive reports on the recommendations identified and establish security plans to be implemented and monitored with these suppliers.
The Cybersecurity Risk Analyst reports to the Director of Cyber Risk, under the Senior Director GRC.
As a Cybersecurity Risk Analyst, within the Group Cybersecurity team, you will be in charge of:
ACTIVITIES :
Review and sometimes develop security architectures for complex systems
Identify security objectives in compliance with security policies and standards
Knowing how to conceptualize security management solutions
Act as a technical expert with internal partners
Define technical security specifications in contract
Evaluate supplier contracts, improve them and insert cybersecurity clauses
Perform security audits and monitor compliance with procedures
Categorize the organization's assets
Evaluate the residual risk when there is a difference between the architecture defined and that implemented
Monitor and improve the risk management methodology
These activities are not exhaustive and may change according to operational needs.



SKILLS :
Your profile meets the following criteria:
You hold relevant industry certifications in cybersecurity, including but not limited to: Certificate of Cloud Security Knowledge (CCSK) Certified Information Systems Security Professional (CISSP) Risk Manager ISO 27005 ISMS ISO 27001 Lead auditor or Lead Implementer Certified Information System Auditor (CISA) CCNA-Security Certified Cloud Security Professional (CCSP) Certified Ethical Hacker (CEH) You come from a course, ideally Engineer or equivalent, focusing on rigor and optimization You have at least 8 years of experience in a similar role, as a cybersecurity analyst or 4 years of experience in security architecture (confidentiality, authentication, identity and access, standards, policies, intrusion detection , security perimeter, etc.); You are adept at popularizing and conveying a complex message to an executive audience, including financial aspects, risks, business impacts and performance metrics; Experience in the Transport / Shipping / Logistics sector is an asset; You speak fluent English.
PROFILE:
You also have the following qualities:
Autonomy and proactive behavior, Written and oral communication, capacity for analysis and synthesis Ability to adapt to various situations and to adjust their behavior according to the environment and the type of speaker Team spirit, pedagogy, ability to develop skills Ability to acquire new functional skills, Ability to identify the different components of a problem with a view to their treatment Capacity for popularization and synthesis of issues and proposed solutions Ability to work in an international environment, in contact with multicultural and offshore teams, Perseverance and pedagogy, all keen to make things happen, challenge the status quo
CMA CGM (America) LLC is committed to equal employment opportunity for all qualified persons without regard to race, color, religion, sex, national origin, pregnancy, age, sexual orientation, marital status, gender identity, veteran status, disability, or any other legally protected classification.



PI194590940

Cyber Threat Analyst, Staff (Government) - 2216550Description AT&T Global Public Sector is a trusted provider of secure, IP-enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing, and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values, and dedicated to our customers' mission.

Our Cyber Security Team supports the customer by investigating, analyzing, and mitigating cybersecurity incidents that attempt to breach the Customer's network infrastructure, applications, and operating systems.
AT&T has an opening for a Staff Cyber Threat Analyst to support the Grimlock contract.
The job duties of the Staff Cyber Threat Analyst are as follows:

Conducts research, analysis, & correlation across a wide variety of cyber threat data sets (indications and warning)
Monitors external threat data sources to maintain currency of CND threat conditions and assists with determining which security issues may have an impact on the enterprise
Assists with researching, identifying, and verifying new cyber threat adversary tools, tactics, and processes (TTPs)
Contributes to the completion of milestones associated with specific projects
Provides solutions to a variety of technical problems of moderate scope and complexity

Required Clearance:
TS/SCI with poly (#ts/sci) (#polygraph)
Required Qualifications:

A minimum of 2+ years overall related experience and a Bachelor's degree in computer science, information systems (or equivalent) or an Associates degree and 4+ years related experience or 6+ years overall related experience with no degree.
IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required, or higher
Strong interpersonal and communication skills, with the ability to present in a group setting
Possesses a sense of urgency, strong organizational and follow up skills
Must possess excellent Customer Service skills

Ready to join our team? Apply Today!
Job Field - Government TechnologyPrimary Location - Virginia-CHANTILLYSchedule - Full-time Shift - Day JobEmployee Status - RegularJob Posting: Oct 3, 2022, 4:00:00 AM - Unposting Date: Oct 24, 2022, 4:00:00 AMJob Level - Senior Associate/Second Level Manager

Join the industry leader to design the next generation of breakthroughs
Innovate to solve the world's most important challenges
Honeywell is a Fortune 100 company that invents and manufactures technologies to address critical challenges linked to global macrotrends such as safety, security, productivity, global urbanization and energy. With approximately 129,000 employees worldwide, including more than 19,000 engineers and scientists, Honeywell has an unrelenting focus on quality, delivery, value, and technology in everything they make and do. Honeywell has been named a Top 100 Global Innovator for seven years in a row, recognizing the company's global reach of portfolio and invention influence.

In Kansas City, Honeywell Federal Manufacturing & Technologies (FM&T) manages and operates the U.S. Department of Energy/National Nuclear Security Administration's (NNSA) Kansas City National Security Campus. This state-of-the-art engineering, manufacturing and sourcing facility produces a wide array of intricate components to deliver trusted national security products and government services primarily for the NNSA. Honeywell FM&T's culture of integrity, commitment and continuous improvement enables them to deliver responsive, collaborative, and innovative management and technology services and products that translate into cutting edge solutions to complex national security issues.

***This position will be in Kansas City, MO***

Summary:

Prepares and assures the implementation of cyber security policies and procedures, conducts investigations of unusual incidents involving cyber security issues
Plans and coordinates the access controls to allow authorized personnel or visitor access to restricted electronic records, materials, or areas
Plans, develops, coordinates, and presents cyber security awareness training and education for cyber security operations, evaluates training program effectiveness, conducts job task analysis, security audits, surveys, and special studies
Develops written documentation of Cyber Security, Telecommunications Security, and local procedures
Coordinates with DOE to obtain rulings, interpretations, and acceptable deviations for compliance with regulations and orders
Represents team in meetings with internal/external customer base
Recommends and/or implements policies and procedures in support of management objectives
Develops and facilitates internal communications which may include processing and distribution of information through communications services
May perform other duties as required

You Must Have:

Three or more years of related experience in cyber security, networking, hardware, operating systems, or a similar role
Bachelor's degree in Cyber Security, Computer Science, Computer Engineering, Information Systems, a related discipline, or two additional years of direct work experience in lieu of bachelor's degree
US citizenship in order to obtain US Dept of Energy ""Q"" level security clearance

We Value:

Demonstrated experience with email filtering technologies
Demonstrated experience managing a network IDS/IPS
Demonstrated experience with firewall technologies
Demonstrated experience with Linux system administration

ADDITIONAL INFORMATION

Job Function: Engineering
Security Clearance: US - DOE Q Clearance
US Citizenship: Must be a US Citizen due to contractual requirements.
FLSA Statement: In this position you will exercise discretion and independent judgment on matters of significance.
FLSA CODE: Exempt

Honeywell is an equal opportunity employer. Qualified applicants will be considered without regard to age, race, creed, color, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex, religion, or veteran status.