ETS Support Lead II (Desktop Risk Mitigation)

Overview

As the Support Lead for Desktop Risk Mitigation, the expectation is to provide day-to-day support related to desktop risk mitigation activities and operational and technical guidance for the team. You will promote leadership efforts, act as the intermediary for the team, and serve as a subject matter expert for critical issues. In addition, you will assist in ensuring objectives are met promptly, maintaining operational stability, tracking performance & development metrics, and focusing on risk and vulnerability management.

Responsibilities

• Delegate tasks/ prioritize assignments for team members
• Provide technical guidance to team members on vulnerability and non-vulnerability related issues
• Oversee daily operations, vulnerability remediation efforts, and DRM project timelines
• Deliver regular updates for priority items to leadership; develop executive-level reporting
• Collaborate between departments, stakeholders, and management in benefit of DRM remediation efforts
• Provide support to address concerns and escalations related to Desktop Risk Mitigation
• Recommend, develop, and maintain accurate documentation for supported environments, technology, and strategy
• Assist in developing key performance indicators; track data and write reports on team objectives
• Develop metrics and reporting; perform data analytics and trend analysis to measure performance and identify improvement opportunities
• Identify and drive service improvement opportunities
• Oversee technical adherence to organizational directives, standards, and instructions relating to systems under management
• Provide effective and efficient feedback for allocating staff resources to service projects and daily work efforts by scoping out the level of effort, length, and duration
• Ensure compliance with Navy Federal Credit Union Information Security and ETS standards and best practices
• Perform root cause analysis to identify and resolve recurring technical problems
• Lead, guide, and mentor less experienced staff
• Assist with life-cycle development

• Establish and oversee project teams
• Develop a project plan (including scope, scheduling, costs, and communications)
• Manage resources, timelines, deadlines
• Assist with Vulnerability (Risk), Issue, and Change management
• Ensure successful project implementation

• Bachelor's degree in Cyber Security Engineering, Risk Management, Information Technology or related field, or the equivalent combination of education, training, and experience
• Two years experience with ServiceNow Vulnerability Response, ServiceNow Issue Management, and Tenable Nessus
• Five years experience with SharePoint, Microsoft Word, Microsoft Excel, Power BI, MECM (Microsoft Endpoint Configuration Manager), Defender for Endpoint, and other Microsoft-owned applications
• Three years experience in leading and guiding professional staff, with the ability to coordinate and set team priorities for multiple efforts to achieve goals and objectives
• Three years experience in project coordination, user testing, & meeting facilitation, overseeing process execution
• Strong experience in MS Excel pivot tables, data analytics, evaluating team productivity and performance metrics, ServiceNow dashboards, and other related tools and reporting
• Familiarity with development and operations framework methodologies, including Information Technology Infrastructure Library (ITIL), Systems Development Life Cycle (SDLC), etc
• Excellent written and verbal communication skills, especially experience with executive-level communications
• Advanced experience working with all levels of staff, management, stakeholders, and vendors
• Advanced exposure and experience in developing action plans and presenting recommendations to management for security posture and risk and compliance strategies
• Advanced experience with audit and risk management; ability to review assessments and establish mitigations

• Familiarity with Jamf and MacOS systems
• Demonstrated experience in vulnerability management and patch management methodologies and tools
• Experience leading security teams
• Master's degree in Cyber Security Engineering, Risk Management, Information Technology, or a related field
• CISSP or GIAC certification(s)