Description

The Sr. Manager/Director of IT Security leads the organization’s cybersecurity function, overseeing at least one direct report and building a sustainable security program. Key responsibilities include defining and executing the IT security strategy, managing the online security awareness program, ensuring compliance with standards, and maintaining confidentiality, integrity, and availability of systems and data. The role also leads risk management, including penetration testing, remediation, incident response planning, and manages the relationship with the third‑party Security Operations Center to strengthen overall security posture.

Safety and hazard elimination are core priorities, with a focus on pre‑planning hazard removal, promoting open communication about safety concerns, and supporting a zero‑accident goal through required training for all personnel.

• Develop and oversee a comprehensive security strategy integrating cybersecurity and risk management aligned with business objectives and regulations
• Manage and mature the organization’s cybersecurity posture across endpoint, network, and cloud environments
• Administer and optimize security technologies such as Microsoft Defender, Azure Security Center, and Okta/Azure AD for identity and access management
• Lead the development and execution of a security awareness program to foster a security culture
• Provide leadership to ensure confidentiality, integrity, and availability of company systems and data
• Conduct routine penetration testing and security audits, coordinating timely remediation and ensuring compliance with frameworks and standards
• Ensure adherence to cybersecurity frameworks and standards (e.g., NIST, CMMC) to maintain regulatory compliance
• Oversee incident response planning and execution, including investigations, documentation, and corrective actions
• Perform risk assessments and vulnerability analyses to proactively identify threats
• Provide executive reporting on risk posture, audit findings, and key security metrics
• Manage relationships with third‑party Security Operations Center providers to align with cybersecurity goals
• Implement SOC recommendations to enhance threat detection, response capabilities, and overall security posture
• Oversee monitoring and detection systems to ensure timely identification and response to security threats
• Pre‑plan and identify methods to eliminate daily work‑task hazards
• Observe habits and hazards of others and bring them to attention
• Uphold safety as the top priority and support a zero‑accident objective
• Promote open communication between field and office regarding safety concerns, suggestions, improvements, and PPE needs
• Obtain required safety training as expected of all company personnel

Requirements

• 8+ years of experience in IT Security or Cybersecurity with at least 2 years in a leadership capacity
• Bachelor’s degree in Information Technology, Cybersecurity, or related field (or equivalent professional experience)
• Strong knowledge of cybersecurity frameworks, threat intelligence, and risk management
• Experience with cloud security (e.g., AWS, Azure), network security, and identity and access management solutions
• Proven ability to manage third‑party SOC relationships and implement security recommendations
• Strong understanding of network, system, and application security principles
• Proficient in security monitoring, threat detection, incident response, and risk assessment tools
• Knowledge of data privacy laws, compliance frameworks, and cybersecurity standards
• Ability to operate both strategically and hands‑on in a fast‑paced environment
• Excellent analytical, problem‑solving, and organizational skills
• Experience with Trend Antivirus (a plus)
• Experience with Arctic Wolf (a plus)
• Experience with KnowBe4 (a plus)
• Knowledge of CMMC certification process (a plus)

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance