Cybersecurity Manager

Nature's Way•Green Bay, WI

36d•Remote

About The Position

The Cybersecurity Manager leads the day-to-day execution and continual improvement of Nature’s Way’s enterprise Cyber Security program. The role manages security operations, vulnerability management, incident response, risk reduction, compliance and audit readiness, security awareness, third-party security services, and operational use of Microsoft security capabilities. Working across IT, business teams, and service providers, the manager implements security controls, coordinates remediation, improves detection and response workflows, and strengthens the organization’s security posture while supporting the broader security strategy established by the Director of Cyber Security and IT Operations. This role is fully remote. The position has supervisory responsibilities, including leading, mentoring, and developing Cyber Security staff. It requires a bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field, or an equivalent combination of education, professional certifications, and relevant experience. Demonstrated experience in enterprise cybersecurity operations, risk management, incident response, and audit/compliance activities is required; prior leadership or supervisory experience is preferred. Relevant certifications such as CISSP, CISM, or Microsoft security certifications are preferred.

Requirements

Progressive experience in cybersecurity, information security, or closely related IT roles, including experience leading security initiatives and guiding other security professionals.
Working knowledge of security frameworks and best practices such as NIST CSF, ISO/IEC 27001/27002, and CIS Controls.
Experience with vulnerability management, security monitoring, incident response, identity and access management, endpoint security, logging/SIEM, data protection, secure configuration, and patch management.
Experience supporting internal or external security audits, assessments, evidence collection, remediation, and compliance activities.
Hands-on experience designing, maturing, implementing, administering, tuning, and integrating Microsoft security capabilities, including Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft Sentinel, Microsoft Entra ID and Privileged Identity Management, Microsoft Purview, Microsoft Intune security controls, and related Microsoft 365 and Azure security capabilities.
Experience designing and governing security automation, including Microsoft Sentinel automation rules and playbooks, Logic Apps, alert enrichment, notifications, data connectors, workflow integrations, and automated response actions.
Experience managing third-party SOC or managed security service providers, including service-level oversight, escalation, quality review, access dependencies, performance reporting, and vendor coordination.
Ability to assess technical risk, translate findings into practical remediation plans, and communicate risk to technical and non-technical stakeholders.
Excellent verbal and written communication skills and ability to interact professionally with executives, managers, auditors, partners, and subject matter experts.
Highly self-motivated, detail-oriented, collaborative, and able to operate effectively in a fast-paced environment.
Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field, or an equivalent combination of education, professional certifications, and relevant experience.
Demonstrated experience in enterprise cybersecurity operations, risk management, incident response, and audit/compliance activities.
Commitment to continuous professional development and staying current with emerging technologies, threats, and security practices.

Nice To Haves

Knowledge of enterprise infrastructure and cloud technologies, including Microsoft Azure and Microsoft 365 security environments.
Relevant security certifications such as CISSP, CISM, or Microsoft security certifications.
Prior leadership or supervisory experience.

Responsibilities

Lead execution and continual improvement of the enterprise Cyber Security program, translating strategy, policies, standards, and priorities into operational plans.
Manage vulnerability management, including identifying and prioritizing vulnerabilities, coordinating remediation, and reporting technology risks.
Lead day-to-day security operations and monitoring, including investigation, escalation, response, documentation, and follow-up for security events and incidents.
Coordinate incident response across IT domains and business functions, and support post-incident reviews and corrective actions.
Maintain audit and assessment readiness by coordinating documentation, evidence collection, control validation, findings response, and remediation tracking.
Support security risk assessments and third-party/vendor security reviews, and coordinate mitigation of identified risks.
Partner with IT, Legal, Operations, Compliance, and other business teams on security initiatives and remediation activities.
Promote security awareness and compliance through communication, education, and support of organization-wide security programs.
Support implementation of security capabilities, including identity and access management, privileged access, endpoint protection, vulnerability management, and email/web security.
Own implementation and operation of logging and monitoring, SIEM/SOAR, and data protection capabilities.
Manage third-party SOC and other security service providers, including service levels, analyst performance, alert quality, access, escalation, incident coordination, reporting, coverage, and continuous improvement.
Lead the design, development, testing, governance, and continual improvement of incident response and remediation tools, workflows, automation, playbooks, integrations, and reporting.
Oversee operational configuration, integration, data quality, alerting, and policy alignment of Microsoft security capabilities, including Defender XDR, Defender for Endpoint, Defender for Cloud, Sentinel, Entra ID, Purview, and supporting data connectors.
Establish and govern least-privilege administrative access, privileged identity management, separate administrative accounts, role elevation, and access reviews for security and technology platforms.
Maintain and improve security policies, processes, procedures, standards, knowledge articles, incident records, and lessons learned.
Help establish and maintain secure configuration, patching, hardening, and technical control standards across infrastructure, applications, endpoints, and cloud environments.
Provide security metrics, risk information, recommendations, and status updates to IT leadership and relevant stakeholders.
Evaluate emerging threats, technologies, and security practices and recommend practical improvements.
Mentor and develop Cyber Security staff, provide technical and operational guidance, establish priorities, and foster accountability and continuous improvement.

Benefits

Medical plan options, including PPO or high-deductible plans with a company contribution to a health savings account.
Dental insurance through Delta Dental PPO, with an option for enhanced coverage.
Vision coverage, including routine preventative coverage under the medical plan and optional additional coverage.
11 paid holidays per year and paid time off starting at a minimum of two weeks per year.
401(k) company match of up to 4% when employees contribute at least 6%, plus a potential annual profit-sharing contribution.
Company-provided short-term and long-term disability insurance.
Life and AD&D insurance.
Flexible spending accounts.
Voluntary critical illness and accident coverage.
New parent phase-in program and paternity leave.
Educational assistance reimbursement.
Product discounts.
Wellness program.
Benefits are effective on the first day of employment.