Summary: At Cold Spring Harbor Laboratory we are looking for a Cybersecurity Manager to lead our IT protective services, ensuring that our groundbreaking research remains secure, accessible, and resilient against modern threats.<\/p>\n
In this role, you will be the primary steward of our digital environment, balancing technical expertise with strategic oversight to support a world-class scientific community.<\/p>\n
Position Responsibilities:<\/strong><\/p>\n \u00a0<\/p>\n ESSENTIAL DUTIES AND RESPONSIBILITIES:<\/p>\n \u00b7 Cybersecurity Operations Management<\/p>\n \u00b7 Access Management<\/p>\n \u00b7 Business Continuity<\/p>\n \u00b7 Governance and Risk Management<\/p>\n Position Requirements:<\/strong><\/p>\n \u00a0<\/p>\n Position Requirements:<\/p>\n EDUCATION:<\/p>\n \u00b7 Bachelor\u2019s degree in Computer Science, Information Security, or a related field. (Masters Preferred)<\/p>\n \u00b7 Certification(s) in one or more of the following areas: GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), CISA: Certified Information Security Auditor, CEH: Certified Ethical Hacker, CISM: Certified Information Security Manager, or CompTIA Security+.<\/p>\n EXPERIENCE:<\/p>\n \u00b7 Minimum of 6 years of professional IT experience, working hands on in a complex, enterprise-level technology infrastructure. Minimum 4 years in a cybersecurity leadership role. Experience working in a research institution with scientific researchers and\/or academic faculty preferred.<\/p>\n \u00b7 Experience in data protection and cybersecurity, including incident management, security incident response frameworks, and disaster recovery planning.<\/p>\n \u00b7 Proficiency in security technologies and tools, including SIEM, firewalls, VPNs, data encryption protocols, and anti-malware solutions.<\/p>\n \u00b7 Experience in cloud security and working with cloud platforms like AWS, Azure, or Google Cloud.<\/p>\n \u00b7 Strong understanding of GDPR, CCPA, HIPAA, or similar data privacy regulations.<\/p>\n \u00b7 Hands-on experience with vulnerability assessments, penetration testing, and ethical hacking.<\/p>\n \u00b7 Extensive knowledge of regional and global cybersecurity frameworks, such as NIST, ISO 27001, SOC 2,nand CIS Controls.<\/p>\n SKILLS:<\/p>\n \u00b7 Strong leadership and team management skills, with experience leading cybersecurity initiatives.<\/p>\n \u00b7 Solid analytical and problem-solving skills, with the ability to identify and mitigate data security risks.<\/p>\n \u00b7 Excellent communication skills (oral and written) with the ability to be accurate, precise and, whenever possible, succinct in messaging about complex problems to be solved and\/or work to be completed.<\/p>\n \u00b7 Ability to work cross-functionally with IT, legal, and business stakeholders.<\/p>\n \u00b7 Experience in the following platforms, systems, applications and network hardware including: Rapid7, Mimecast, ESET, ThreatLocker, DUO, Windows Server, Active Directory, Exchange, MS365, Fortinet, Linux\/CentOS,TCP\/IP, firewall and systems security, signal detection and review, business continuity, and disaster recovery.<\/p>\n \u00b7 Experience with regulatory compliance related to cybersecurity and data privacy laws.<\/p>\n \u00b7 Knowledge of threat intelligence platforms and advanced persistent threats (APT).<\/p>\n \u00b7 Familiarity with Zero Trust Architecture and its implementation.<\/p>\n \u00b7 Expertise in threat modelling, risk management, and securing controlled-access data.<\/p>\n \u00a0<\/p>\n