Manager - Cyber Security Training & Governance

Position Overview

The primary responsibility of the Manager Cyber Security Training & Governance is to manage the end-to-end processes and / or managers and analysts performing duties in one or more of the following areas : vulnerability management, cyber data governance, risk and verification, cyber awareness and training, and cyber policy / standards / standard operating procedures development.

All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures.

All Las Vegas Sands Corp. Team Members are expected to conduct and carry themselves in a professional manner at all times.

Team Members are required to observe the Company’s standards, work requirements and rules of conduct.

Essential Duties & Responsibilities

This Manager Cyber Security Training and Governance is expected to manage multiple projects and / or manager(s) within the areas of at least one of the following :

Vulnerability management which included successfully scanning the LVSC computing environment for secure configurations and vulnerabilities, researching and eliminating false positives, tracking and remediating found issues, and tracking and performing the exception processes

Cyber governance, risk and verification which performs risk assessments, system security and industrial control system zone security plans including listing controls, gaps in implemented controls and tracking remediation of gaps, and provides input to the risk register

Cyber security awareness and training which includes creating, and delivering cyber awareness training based on role and rank within the organization, and arranging and tracking cyber team member information security training and role progression

Cyber policy / standard and standard operating procedure creation, review, distribution, and maintenance

Perform job duties in a safe manner.

Attend work as scheduled on a consistent and regular basis.

Perform other related duties as assigned.

Minimum Qualifications

At least 21 years of age.

Proof of authorization to work in the United States

Bachelor’s degree computer science or cyber security preferred or equivalent work experience

Must be able to obtain and maintain any certification or license, as required by law or policy.

Must have a current and in good standing CISSP or similar certification for at least 2 years

5 years of hands-on cyber experience

Demonstrated management experience in at least one area in the following list :

Cyber Vulnerability Management

Cyber Governance, Risk and Verification

Cyber Awareness and Training

Cyber Policy / Standard / Standard Operating Procedures

Working knowledge of threats and vulnerabilities and their significance to cyber risk

Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

Must be able to work varied shifts, including nights, weekends and holidays.

Physical Requirements

Must be able to :

Physically access assigned workspace areas with or without reasonable accommodation.

Work remotely as necessary

Work indoors and be exposed to various environmental factors such as, but not limited to, CRT, noise, and dust.

Utilize laptop and standard keyboard to perform essential functions of the job.