Cyber Security Manager

Job Summary

We are seeking an experienced Cyber Security Manager to lead our cybersecurity program, protect enterprise systems and data, and oversee the implementation of security strategies across the organization. The ideal candidate will have expertise in security operations, risk management, governance, cloud security, incident response, and regulatory compliance. You will lead a team of security professionals, collaborate with cross-functional stakeholders, and ensure that security initiatives align with business objectives while maintaining compliance with industry standards.

Key Responsibilities

• Lead and manage the Cyber Security team, providing technical guidance, mentorship, and performance management.
• Develop and implement enterprise-wide cybersecurity strategies, policies, standards, and procedures.
• Oversee Security Operations Center (SOC) activities, including threat detection, incident response, and security monitoring.
• Conduct enterprise risk assessments and identify security gaps across infrastructure, cloud environments, applications, and endpoints.
• Manage vulnerability assessments, penetration testing programs, and remediation efforts.
• Ensure compliance with security frameworks and regulations, including NIST CSF, NIST 800-53, ISO/IEC 27001, SOC 2, PCI DSS, HIPAA, CIS Controls, and GDPR where applicable.
• Collaborate with IT, DevOps, Cloud Engineering, Legal, Compliance, and executive leadership to strengthen the organization’s security posture.
• Oversee Identity and Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and Zero Trust initiatives.
• Manage third-party security risk assessments and vendor security reviews.
• Lead incident response, digital forensics investigations, and disaster recovery planning.
• Develop and deliver cybersecurity awareness and training programs for employees.
• Monitor security metrics, KPIs, and prepare reports for executive leadership and board-level presentations.
• Evaluate and implement emerging cybersecurity technologies and best practices.
• Manage cybersecurity budgets, vendor relationships, and security tool procurement.

Required Qualifications

• Bachelor’s degree in Cyber Security, Information Technology, Computer Science, or a related field (Master’s degree preferred).
• Experience in cybersecurity, information security, or IT security.
• Leadership or management experience leading cybersecurity teams.
• Strong understanding of enterprise security architecture, governance, risk management, and compliance.
• Experience managing enterprise security programs in cloud and hybrid environments.
• Excellent communication, leadership, analytical, and problem-solving skills.

Required Technical Skills

• Security Operations Center (SOC)
• Security Information and Event Management (SIEM)
• Microsoft Sentinel
• Splunk Enterprise Security
• IBM QRadar
• CrowdStrike Falcon
• Microsoft Defender for Endpoint
• Palo Alto Networks Firewalls
• Fortinet FortiGate
• Cisco Secure Firewall
• AWS Security Services
• Microsoft Azure Security
• Google Cloud Security
• Identity and Access Management (IAM)
• Microsoft Entra ID (Azure AD)
• Okta
• CyberArk
• SailPoint
• Vulnerability Management (Tenable Nessus, Qualys)
• Endpoint Detection and Response (EDR/XDR)
• Zero Trust Architecture
• Data Loss Prevention (DLP)
• Security Automation and SOAR
• Docker
• Kubernetes
• Terraform
• Python
• PowerShell
• Linux & Windows Server Administration

Preferred Certifications

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CCSP (Certified Cloud Security Professional)
• CompTIA Security+
• CompTIA CySA+
• GIAC Certifications (GSEC, GCIA, GCIH)
• Certified Ethical Hacker (CEH)
• AWS Certified Security – Specialty
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst (SC-200)

Preferred Qualifications

• Experience with Zero Trust Security architecture.
• Knowledge of AI-driven cybersecurity, threat intelligence, and security automation.
• Experience securing cloud-native applications and DevSecOps pipelines.
• Familiarity with container security, Kubernetes security, and Infrastructure as Code (IaC).
• Experience supporting audits for SOC 2, ISO 27001, HIPAA, PCI DSS, or FedRAMP.
• Strong project management and stakeholder communication skills.

Benefits

• Competitive salary with annual performance bonuses.
• Medical, dental, and vision insurance.
• 401(k) retirement savings plan with company match.
• Flexible remote and hybrid work options.
• Paid vacation, sick leave, and company holidays.
• Professional development and certification reimbursement.
• Employee wellness and assistance programs.
• Career growth and leadership development opportunities.