Cybersecurity Manager

Builders Mutual • Raleigh, NC

1d • Hybrid

About The Position

At Builders Mutual, we believe in the power of teamwork to get the job done right. Every day, our team delivers comprehensive commercial insurance and trusted safety solutions to protect and advance the unique needs of the contractor community. Rooted in teamwork, inclusion, expertise, and community, we work together to serve better, achieve more, and build lasting impact.
The OPPORTUNITY:
Leverage your experience and join our team as the Cybersecurity Manager. This position provides the vision and strategies necessary to ensure the confidentiality, integrity, and availability of Builders Mutual electronic information by communicating risk to senior administration, creating, and maintaining enforceable policies and supporting processes, and ensuring compliance with regulatory requirements. The CSM is responsible for creating/maintaining the Cybersecurity Program, leading the Cybersecurity team, establishing an overall security roadmap each year, implementing and monitoring information security standards and policies for BMIC, and aligning security strategy with business goals and objectives. To support these activities, the CSM coordinates activities with other departments, including the evaluation, procurement, and deployment of security-related products and develops and coordinates cyber security awareness and education programs. Additionally, the Cybersecurity Manager ensures a BMIC system-wide incident response plans are in place. Because the success of our company is rooted in teamwork, the way we care about the people we work with and serve, this hybrid role will work in our Raleigh office a minimum of two days with the flexibility to work from home the remaining three days.

Requirements

• Bachelor’s degree or equivalent experience in an IT-related discipline plus a minimum of 5 – 7 years’ experience in a combination of risk management, information security and Information Technology positions demonstrating a progressive growth in responsibility (or equivalent combination of education and experience).
• 4+ years' experience as an information security engineer.
• 1+ years' experience performing penetration testing of network, application, and IT resources.
• Proven experience with current IT security technologies
• Demonstrated experience with information security frameworks
• Demonstrated understanding of technological trends and developments in the areas of information security, risk management, web architectures, and cloud computing
• Demonstrated ability to frame security and risk-related concepts to both technical and nontechnical audiences
• Professional information security certifications such as CompTIA Security+, SSCP, CISSP, CISM, CCNA Security, CCNP Security, CEH, GIAC, or CISA required.
• In-depth knowledge of IT technologies including Cybersecurity best practices, Routing & Switching in LAN/WAN architectures, WLAN, Radius, Firewalls, SSO/SAML, SaaS/Cloud Services, Identity Access Management, SDLC, Microsoft Technologies (Active Directory, IIS, ISA, DNS, SQL), Linux.
• Knowledge and direct experience incorporating ISO 27002, NIST Cybersecurity Framework, and other security control frameworks and standards.
• Knowledge and direct experience with vulnerability management, SIEM and Log Management, file integrity, proxy servers, DLP, IPS/IDS, VPN, PKI, multiple-factor authentication, cryptography.
• Strong analytic and problem-solving skills.
• Strong management and organizational skills.
• Excellent written, verbal communication and presentation skills.

Responsibilities

• Establish and maintain a strategically sound Cybersecurity Program based off internal Risk Analysis to ensure that information assets are adequately protected, including the oversight & coordination of all information security efforts, insuring consistency with regulatory and compliance requirements that govern cyber security for BMIC. This includes, but is not limited to PCI, NAIC, GLBA, SOX, HIPAA, NIST, ISO, ITIL, and Federal/State Directives.
• Define security policies, practices, training programs and standards that govern security functions associated with information technology systems, networks, applications, data communications, and computing services within BMIC – including employee, vendor and customer use and access to information.
• Implement, Monitor and Manage all cloud-related security controls.
• Evaluate, choose, adapt, and drive the implementation of security standards and risk management programs to ensure the integrity, confidentiality, and availability of data.
• Develop effective disaster recovery policies and standards; coordinate the development of implementation plans and procedures to ensure that business-critical services are recovered in the event of a declared disaster and provide direction and in-house consulting in these areas.
• Responsible for identifying, evaluating, and reporting on information security risks, practices, and projects.
• Serve as the process owner of all ongoing activities related to the availability, integrity and confidentiality of customers, vendors, employees, and business information, in compliance with industry directives.
• Lead strategic security planning with End User Services, Application Development, Infrastructure Services teams, and departments within Builders Mutual.
• Work directly with BMIC departments to facilitate IT risk analysis and risk management processes; identify acceptable levels of risk and establish roles and responsibilities about information classification and protection.
• Create and manage information security and risk management training programs for employees, contractors, and approved system users.

Benefits

• Competitive compensation and a performance bonus program
• 3 weeks of PTO to start, plus your birthday off
• A 37.5-hour workweek, with Fridays ending at 2:30 PM
• Professional development through Builders University
• Everyday Wins recognition with swag and extra time off
• 8 paid Volunteer Time Off (VTO) hours to give back
• Comprehensive benefits that support your wellbeing today and your future tomorrow

What This Job Offers

• Job Type: Full-time
• Career Level: Manager