Cybersecurity Supervisor/Manager

SM-Energy Company•Denver, CO

4d•$158,000 - $190,000•Hybrid

About The Position

The Cybersecurity Manager serves as both the operational leader of the Cybersecurity function and the organization's primary cybersecurity architect. This role is responsible for leading day-to-day cybersecurity operations, driving timelines for initiatives, executing the cybersecurity strategy set by the Director – Cybersecurity & Business Continuity, supporting the Director in developing that strategy, and implementing and maintaining security architecture standards, overseeing awareness and training programs, and ensuring security is embedded into enterprise technology decisions. Reporting to the Director – Cybersecurity & Business Continuity, this role provides leadership to cybersecurity personnel, monitors emerging threats and industry trends, and ensures the organization maintains a strong security posture. The Cybersecurity Manager partners closely with Information Technology, Internal Audit, Legal, Human Resources, and business leaders to execute cybersecurity strategies that align with company objectives while reducing risk and to support the Director in developing those strategies. This individual is expected to remain current on evolving threats, technologies, and regulatory requirements and translate those developments into actionable recommendations for the organization.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.
8+ years of progressive cybersecurity experience.
3+ years of leadership or management experience.
Strong communication, presentation, and relationship management skills.
Demonstrated ability to supervise, develop, and motivate a technical team.
Skilled at building team culture and individual accountability.
Provides clear performance expectations, technical feedback, and career development support tailored to individual strengths.
Ability to lead a team through significant operational change — communicating vision, managing uncertainty, and bringing people along as the security environment can quickly evolve.
Strong enough technical background to engage in incident and log analysis, evaluate solutions, and provide informed direction without taking over the work.
Comfortable managing competing demands across support and strategic work; able to make sound triage decisions under pressure and balance reactive support needs with proactive improvement initiatives.
Thrives in a fast-changing environment where tools, platforms, and priorities evolve rapidly.
Maintains a calm and communicative presence in difficult situations.
Communicates effectively to multiple audiences from technical to executive.
SIEM platforms, detect and response activities and coordinating with partners.
Email security platforms, mail flow standards and rules, phishing simulations
Endpoint detection and response platforms, asset inventory understanding
Vulnerability scanning, management and mitigation through patching processes
DNS, DHCP, content and web filtering
Firewall and network security policy understanding
Physical security access control and video management systems

Nice To Haves

CISSP
CISM
CRISC
CCSP
GIAC certifications

Responsibilities

Lead the day-to-day operations of the Cybersecurity team.
Provide strong timeline management for multiple competing projects.
Develop and execute cybersecurity initiatives aligned with the organization’s strategic objectives.
Recommend and implement program goals, priorities, metrics, and performance measures.
Provide leadership, coaching, mentoring, and performance management for cybersecurity personnel.
Develop and maintain cybersecurity reference architectures, standards, and design for review and approval by the Director.
Review and approve security requirements for new applications, infrastructure, cloud platforms, and technology initiatives.
Develop and maintain security roadmaps for identity management, cloud security, endpoint protection, data protection, network security, and threat detection for review and approval by the Director.
Maintain and enhance cybersecurity policies, standards, procedures, and governance processes.
Partner with the Director – Cybersecurity & Business Continuity to identify, assess, and manage cybersecurity and sensitive data risks.
Support compliance initiatives including SOX, IT General Controls (ITGC), and applicable regulatory requirements.
Track risk mitigation efforts and ensure timely resolution of identified issues.
Oversee security monitoring, threat detection, vulnerability management, and incident response activities.
Ensure cybersecurity controls are operating effectively and aligned with industry best practices.
Lead investigations and response efforts related to cybersecurity events and incidents.
Coordinate with IT teams to prioritize and remediate security vulnerabilities.
Coordinate third-party cybersecurity assessments, audits and vendor security reviews.
Develop, implement, and manage the enterprise cybersecurity awareness program.
Develop targeted awareness programs for executives, employees, contractors, and privileged users.
Measure and report on program effectiveness through established metrics and key performance indicators.
Promote cybersecurity awareness as a shared organizational responsibility.