Senior Manager, Cybersecurity

ABOUT THE JOB:

The Senior Manager, Cybersecurity is a hands-on leader responsible for the day-to-day execution and oversight of the organization's cybersecurity program. This role combines direct technical contribution with the management and development of a small cybersecurity team, ensuring the confidentiality, integrity, and availability of the organization's information systems and data.

WHAT YOU'LL BE DOING:

Team Leadership and Execution:
•    Lead and develop a team of two cybersecurity professionals, providing coaching, prioritization, and performance management.
•    Serve as a working manager — actively participating in technical execution alongside the team, not solely in an oversight capacity.
•    Support the VP in shaping the cybersecurity strategy and translate it into actionable plans, priorities, and day-to-day activities.
Governance, Risk, and Compliance (GRC):
•    Own the day-to-day GRC function, including cybersecurity policies, standards, procedures, and control frameworks.
•    Maintain the cybersecurity risk register; identify, assess, and track risks and remediation activities.
•    Support compliance with applicable regulations and frameworks (e.g., SOX, PCI, CMMC, NIST CSF).
•    Coordinate internal and external audits, evidence collection, and control testing.
•    Monitor regulatory and threat landscape changes and recommend policy updates.
•    Manage third-party and vendor cybersecurity risk assessments.
•    Perform software security reviews and drive remediation efforts. 
Incident Response and Investigation:
•    Maintain the incident response plan and lead hands-on response to cybersecurity incidents.
•    Coordinate with internal teams, vendors, and external stakeholders during investigations.
•    Perform root cause analysis and drive corrective actions.
Security Operations and Architecture:
•    Participate directly in threat detection, monitoring, vulnerability management, and remediation activities.
•    Support secure design of systems, networks, and cloud environments in partnership with infrastructure and application teams.
•    Ensure security controls are consistently applied across the environment.
Security Awareness and Training:
•    Manage the cybersecurity awareness and training program, including phishing simulations and end-user education.
•    Promote a culture of security awareness across the organization.
Cybersecurity Tools and Services:
•    Manage cybersecurity tools, platforms, and third-party service providers (e.g., MSSP, SIEM, EDR).
•    Evaluate and recommend new technologies to strengthen the organization's security posture.
Reporting and Communication:
•    Provide regular updates to the VP and other stakeholders on cybersecurity posture, key risks, and initiative status.
•    Communicate technical concepts clearly to both technical and non-technical audiences.
Budget Support:
•    Assist in developing and managing the cybersecurity budget, identifying cost-effective solutions and prioritizing spend against the highest risks.

EDUCATION AND QUALIFICATIONS:

Required Education and Experience: 
•    Bachelor's degree required in Computer Science, Information Systems, or other technical discipline (or equivalent experience).
•    Relevant certifications (e.g., CISSP, CISM, CISA, GIAC) preferred.
•    8+ years of technical experience in cybersecurity or a combination of cybersecurity and closely related technical fields.
•    5+ years of hands-on experience performing threat detection and response.
•    7+ years of people management or team lead experience.

Required Skills and Abilities: 
•    Demonstrated ability to operate as a working manager — balancing direct technical contribution with team leadership.
•    Experience with GRC activities, including policy management, risk assessment, and audit support.

Supervisory Responsibility:
Will manage a team of two Cyber Security Engineers.    

Work Environment: 
This is an in office role; not hybrid.

Travel Requirements: 
0-10%

Physical Requirements:
The employee must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Eyesight and Auditory Skills must be sufficient to meet safety expectations of the position.  The employee must be able to verbally communicate with employees, co-workers, and customers in person and by phone. The employee must also be able to travel to various work environments.