hero

Find Your Dream Job Today

Our mission is to help high-achieving LGBTQ+ undergraduates reach their full potential.

Information Security Manager

McKinsey & Company

McKinsey & Company

IT
Lisbon, Portugal · Prague, Czechia
Posted on Aug 26, 2024
Technology & Digital

Information Security Manager

Job ID: 89845
  • Lisbon
  • Prague

Who You'll Work With

As a Security Manager for the McKinsey SHaPE Practice you will work directly with Practice leadership, engagement teams and product teams on a range of information security, data protection, and governance, risk and compliance activities, including client assurance, policy compliance, vulnerability management, risk assessments, and incident response.
Sitting within the Tech Ecosystem Cybersecurity Area but dedicated to supporting the McKinsey SHaPE Practice full-time, you will be responsible for implementing an information security program that meets both McKinsey policies and standards, as well as the expectations of our clients. This will involve operating and continually improving existing information security processes, as well as the development of new processes in response to evolving threats and business opportunities.

What You'll Do

You will act as a security point of contact for McKinsey’s SHaPE Practice with additional support from the rest of the Tech Ecosystem organization as and when required.
You will drive the promotion and adoption of the Secure Development Lifecycle, DevSecOps and Cloud security policies, and contribute to the development and continual improvement of the Tech Ecosystem security strategy. You will provide reporting on security compliance, incidents, Key Performance Indicators (KPIs) and Objectives and Key Results (OKRs). You will also deliver and represent the priorities of the Practice back to Tech Ecosystem Leadership.

Qualifications

  • 3-5+ years of experience in a similar information security role
  • Working experience with cloud offerings such as AWS, Databricks, etc
  • Technical understanding of a range of enterprise IT and cloud-based architectures and technologies, such as networking, server infrastructure, operating systems, web applications, databases, containerization, mobile
  • Expertise defining system boundaries and the applications and security/compliance/infrastructure support services operating therein
  • Understanding of common security and privacy management frameworks and participation in audit/certification such as: GDPR, NIST SP800-53, ISO 27001, NIST CSF, etc
  • Experience evaluating logging activities for ingestion into SIEM as part of continuous monitoring plan
  • Experience with security technologies and tooling, e.g. vulnerability scanners, firewalls, network monitors, IAM, SIEM, IDS/IPS
  • Knowledge of Secure Software Development Lifecycle and DevSecOps
  • BSc/MSc in Information Security, Computer Science or other technical discipline
Industries
  • High Tech
Capabilities
  • Technology
Apply Now Apply Later

FOR U.S. APPLICANTS: McKinsey & Company is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by applicable law.

FOR NON-U.S. APPLICANTS: McKinsey & Company is an Equal Opportunity employer. For additional details regarding our global EEO policy and diversity initiatives, please visit our McKinsey Careers and Diversity & Inclusion sites.

share this job

Job Skill Group - CSSA
Job Skill Code - SCM - Security Manager I
Function - Technology
Industry - High Tech
Post to LinkedIn - Yes
Posted to LinkedIn Date - Tue Aug 15 00:00:00 GMT 2023
LinkedIn Posting City - Prague
LinkedIn Posting State/Province -
LinkedIn Posting Country - Czech Republic
LinkedIn Job Title - Information Security Manager
LinkedIn Function - Information Technology
LinkedIn Industry - Information Services;Information Technology and Services
LinkedIn Seniority Level - Mid-Senior level