Cybersecurity Manager

Grameen America•New York, NY

2d•Hybrid

About The Position

Grameen America is seeking an experienced and proactive Cybersecurity Manager to lead the day-to-day management of the organization’s cybersecurity program. The role is the primary liaison among internal teams, the Managed Service Provider (MSP), and the virtual Chief Information Security Officer (vCISO) partner, helping maintain a strong security posture and meet applicable regulatory, audit, and industry requirements. The Cybersecurity Manager will own the cybersecurity roadmap; coordinate security initiatives and assessments; manage vendor risk reviews; oversee audit and compliance activities; and embed cybersecurity best practices throughout the organization. The role requires strong project management and collaboration with technical and business stakeholders. The position is hybrid in New York City, and applicants must reside in the New York tri-state area within the U.S. Required in-person attendance includes quarterly staff meetings in New York City.

Requirements

Degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
At least 5 years of cybersecurity, information security, risk management, or related experience.
Experience managing cybersecurity programs, audits, risk assessments, or compliance initiatives.
Experience working with external vendors, managed service providers, and consulting partners.
Demonstrated project management experience and ability to manage multiple initiatives simultaneously.
Must reside in the New York tri-state area within the U.S.
Must be legally able to work in the U.S.; visa sponsorship is not provided.

Nice To Haves

Relevant security certification, such as CISSP, CISM, CRISC, Security+, or equivalent.
Experience in a regulated environment, ideally financial services, fintech, or nonprofit.
Knowledge of NIST frameworks, NYDFS requirements, audits, and vendor risk management.
Experience securing cloud and remote-work environments, including Azure or AWS infrastructure and endpoint security.
Demonstrated success maintaining and scaling secure operations, including embedding security throughout the software development lifecycle.

Responsibilities

Own and execute the Information Security and Cybersecurity Program and roadmap in partnership with the CTO and vCISO, aligning priorities with organizational goals.
Lead cybersecurity initiatives from planning through completion, including timelines, dependencies, maturity tracking, and program reporting.
Act as the primary point of contact for technology audits, cybersecurity assessments, regulatory reviews, and penetration tests, coordinating evidence and responses.
Manage remediation of audit and assessment findings through completion and support compliance with applicable requirements, including NYDFS and NIST-based controls.
Partner with the vCISO to conduct cybersecurity due diligence and risk reviews for new and existing third-party vendors.
Maintain a comprehensive vendor risk program.
Maintain cybersecurity policies, standards, procedures, and governance documentation in alignment with regulatory requirements and industry best practices.
Lead risk assessments, maintain the cybersecurity risk register, and report key metrics, risk indicators, and program status.
Lead organization-wide cybersecurity awareness and phishing training and promote a culture of security awareness.