Cybersecurity Manager

URM Stores Inc•Spokane, WA

2d•$150,000 - $160,000•Onsite

About The Position

URM Stores, Inc. is looking for a talented Cybersecurity Manager to join our ever-growing team here at our Corporate office in Spokane, WA. The Cybersecurity Manager is a hands-on technical leader responsible for the day-to-day execution, operation, and continued maturation of URM’s cybersecurity program. This role leads and develops the Security Engineering team while remaining actively engaged in security engineering, incident response, vulnerability management, security operations, identity and access security, and complex technical investigations. The Cybersecurity Manager translates cybersecurity strategy, standards, and risk priorities into effective technical controls, operational processes, and measurable outcomes, while providing operational leadership for governance and compliance activities, including NIST Cybersecurity Framework maturity, PCI DSS, security assessments, audit support, control validation, and remediation. As our Cybersecurity Manager, you’ll partner closely with the Infrastructure & Cybersecurity Architect, infrastructure engineering teams, Applications, Data/Integration/AI, Member Services, business stakeholders, and external security partners to ensure cybersecurity controls are practical, effective, supportable, and aligned with URM’s business and technology objectives. The ideal candidate combines strong technical cybersecurity expertise with effective people leadership, collaboration, and operational judgment, with the ability to balance hands-on technical work with the leadership and continuous improvement responsibilities of a growing cybersecurity program.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field, or equivalent experience, with 7+ years of progressive cybersecurity, security engineering, infrastructure security, or related technical experience, including 2+ years of technical leadership or people-management experience.
Demonstrated hands-on experience implementing, operating, troubleshooting, and improving enterprise cybersecurity technologies and controls, with strong knowledge of network security, firewalls, segmentation, VPNs, endpoint security, identity and access management, MFA, privileged access, logging, monitoring, and cloud security.
Proven experience with cybersecurity incident investigation and response, vulnerability and exposure management, security assessments, control validation, and remediation.
Working knowledge of cybersecurity frameworks such as the NIST Cybersecurity Framework, with experience supporting PCI DSS or other regulated and audited environments, including audits, assessments, evidence collection, and remediation activities.
Ability to lead and develop a technical cybersecurity team while remaining hands-on with complex security engineering and investigations. Demonstrated ability to work effectively with infrastructure and technology teams, business stakeholders, managed security providers, vendors, auditors, and third-party assessors.
Strong analytical, troubleshooting, documentation, planning, communication, and organizational skills, with the ability to prioritize cybersecurity initiatives based on risk and business impact and remain effective during high-impact security incidents.

Nice To Haves

Experience leading or supporting NIST CSF assessments, cybersecurity maturity programs, and PCI DSS technical controls.
Experience with Microsoft Entra, Microsoft 365, Azure, hybrid/cloud environments, SIEM/XDR, endpoint protection, vulnerability management, application control, privileged access, email security, and network-security technologies.
Experience with cybersecurity platforms such as Stellar Cyber, Qualys, ThreatLocker, BeyondTrust, Carbon Black, Microsoft Defender, Mimecast, Fortinet, or comparable technologies.
Experience with Zero Trust, SASE/ZTNA, network segmentation, and modern identity architectures.
Experience working in grocery, wholesale distribution, logistics, retail, or other high-availability operational environments.
Relevant professional certifications such as CISSP, CISM, CRISC, GIAC, Security+, CySA+, or comparable credentials.

Responsibilities

Lead cybersecurity operations and engineering by overseeing the day-to-day operation, maintenance, and continuous improvement of URM’s cybersecurity technologies, controls, processes, and engineering activities.
Lead and develop the Security Engineering team by establishing clear ownership, priorities, technical standards, and measurable expectations while maintaining hands-on involvement in security engineering, troubleshooting, implementation, configuration, and complex technical investigations.
Provide technical leadership across the cybersecurity environment, including endpoint and application security, network security, vulnerability management, identity and privileged access, email security, logging, monitoring, and related technologies. Ensure security solutions are properly configured, integrated, monitored, maintained, and continuously improved.
Integrate cybersecurity into enterprise technology and architecture by partnering with the Infrastructure & Cybersecurity Architect and Infrastructure Engineering teams across network, systems, cloud, identity, and enterprise architecture. Evaluate emerging cybersecurity technologies and provide recommendations based on risk reduction, technical fit, integration, and long-term supportability.
Establish and maintain operational standards and documentation including cybersecurity standards, procedures, architecture diagrams, technical documentation, and operational runbooks to promote consistent, effective, and sustainable security operations.
Lead security operations and incident response by overseeing URM’s internal security operations and coordinating with managed security and detection-and-response partners. Serve as the primary internal leader for Tier 2/3 cybersecurity escalations, including investigation, containment, remediation, and recovery.
Drive effective threat detection and response by ensuring meaningful security telemetry is collected and leveraged across endpoint, identity, network, cloud, email, infrastructure, and critical systems. Provide technical leadership during significant cybersecurity incidents and coordinate response activities across IT teams, external partners, and business stakeholders.
Strengthen incident preparedness and response capabilities by maintaining and continuously improving incident-response plans, playbooks, escalation procedures, and technical response capabilities. Lead cybersecurity tabletop exercises and ensure identified actions and improvements are tracked through completion.
Drive continuous improvement and operational accountability through post-incident reviews, documented lessons learned, and measurable metrics for detection, investigation, response, and security-control effectiveness. Ensure findings translate into meaningful improvements to security controls, processes, architecture, and training.
Lead URM’s vulnerability and exposure management program by establishing consistent, risk-based processes for identifying prioritizing, remediating, and validating vulnerabilities across technology environments. Evaluate risk based on technical severity, exploitability, exposure, business criticality, sensitive-data considerations, and compensating controls.
Coordinate and measure vulnerability remediation with infrastructure, application, endpoint, and system owners. Monitor vulnerability aging, remediation SLAs, exceptions, compensating controls, and accepted risk, and provide leadership with meaningful metrics focused on measurable risk reduction.
Oversee security testing and validation by coordinating penetration testing, vulnerability assessments, remediation activities, and validation of findings to ensure identified risks are appropriately addressed.
Lead cybersecurity governance and control-maturity initiatives established by the Sr. Director, Infrastructure & Cybersecurity, including the continued adoption and maturation of the NIST Cybersecurity Framework and other applicable cybersecurity requirements.
Support cybersecurity compliance, audits, and assessments including PCI DSS, regulatory and contractual requirements, and third-party security assessments. Maintain accurate and repeatable policies, standards, procedures, control documentation, evidence, and technical validation to support assessments and demonstrate control effectiveness.
Identify, track, and remediate cybersecurity risks and control gaps by partnering with technical and business owners to develop practical remediation plans. Monitor findings, remediation activities, exceptions, compensating controls, and risk acceptance, while evaluating third-party security controls and documentation as needed.

Benefits

Medical/Dental/Vision/RX Insurance premiums paid 100% for the employee and over 93% for dependents
401k Retirement Plan with up to 9% Company match
Subsidized Life Insurance for employees and great rates for family
Company paid Long-Term Disability insurance
Short-Term Disability and Cancer Insurance available
Life Flight Insurance at Special Rate
Great vacation plan
Six Paid Holidays and four Paid Personal Holidays
Paid Sick Days
Paid Volunteer Service Day
Company sponsored activities
Corporate discounts (gym memberships, cell phone plans, computer discounts)
Employee Discount Program at Company-owned Grocery Stores