CW - Cybersecurity Manager

Cactus Wellhead•Piney Point Village, TX

6d•Onsite

About The Position

The Cybersecurity Manager is a hands-on leadership role responsible for the day-to-day management, execution, and continuous improvement of the company's cybersecurity operations and engineering capabilities. This position leads cybersecurity personnel, managed security providers, consultants, and technical initiatives across security operations, incident response, vulnerability management, security engineering, identity security, cloud security, data security, and related programs. The role partners with IT, Infrastructure, Cloud Engineering, application teams, business stakeholders, and external providers to implement the cybersecurity roadmap, reduce risk, and maintain effective security controls across the enterprise. The ideal candidate is a practical, technically credible leader who can balance team management, operational accountability, project delivery, and hands-on participation when needed. This role executes the cybersecurity strategy and governance program established by leadership, provides technical and operational direction to the cybersecurity team, and ensures initiatives and remediation activities are completed effectively. The successful candidate will remain technically engaged and contribute directly when needed while providing the daily leadership, prioritization, coaching, and operational accountability required to maintain operating capabilities and develop the team.

Requirements

Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or an equivalent combination of education and relevant experience.
8+ years of progressive experience in cybersecurity, security engineering, security operations, or a related technical discipline.
3+ years of experience leading cybersecurity personnel, technical teams, projects, vendors, managed security providers, or cybersecurity programs.
Demonstrated experience managing security operations, incident response, vulnerability management, security engineering, and risk remediation activities in an enterprise environment.
Experience supporting cloud, identity, endpoint, network, and data security initiatives within distributed or hybrid technology environments.
ISC2 Certified Information Systems Security Professional (CISSP) or ISACA Certified Information Security Manager (CISM).
Microsoft, cloud security, security operations, or other relevant technical certifications.
Other relevant cybersecurity leadership, risk, or governance certifications.
Strong technical and operational knowledge of security operations, incident response, vulnerability management, security engineering, and enterprise security technologies.
Working knowledge of modern cybersecurity architectures and concepts, including Zero Trust, identity security, cloud security, Secure Access Service Edge (SASE), and layered security controls.
Familiarity with data security capabilities and programs, including data classification, data loss prevention, data security posture management, data governance, and protection of sensitive information.
Experience overseeing detection and response technologies, managed security services, vulnerability management platforms, cloud security controls, and other enterprise cybersecurity capabilities.
Ability to assess technical and operational risk, prioritize remediation based on business impact, and hold stakeholders accountable for timely resolution.
Experience coordinating cybersecurity incidents, investigations, containment, recovery, communications, and post-incident corrective actions.
Working knowledge of cybersecurity governance, third-party risk, audit support, policy execution, control validation, and recognized frameworks such as NIST CSF and CIS Controls.
Ability to evaluate technologies and services, manage vendor performance, develop recommendations, and support budget and renewal decisions.
Strong people leadership, coaching, prioritization, project execution, documentation, analytical, and communication skills.
Ability to operate effectively as a hands-on cybersecurity manager in a lean team, personally engaging in technical investigations, engineering reviews, incident response, and high-priority remediation when risk, complexity, or team capacity requires it, while remaining accountable for people leadership, prioritization, delegation, and delivery.

Responsibilities

Practice safe work habits and comply with all quality, safety, health, environmental policies, procedures, programs, and regulations.
Lead day-to-day cybersecurity operations, security engineering activities, incident response, vulnerability management, and technical risk remediation across the enterprise.
Manage, develop, and establish priorities for cybersecurity personnel while coordinating the work of managed security providers, consultants, contractors, and other external resources.
Oversee security monitoring, detection, investigation, escalation, containment, recovery, and post-incident improvement activities in coordination with internal teams and managed security partners.
Lead the enterprise vulnerability management process, including risk-based prioritization, remediation coordination, exception tracking, validation, and operational reporting.
Oversee the administration, implementation, integration, and continuous improvement of cybersecurity technologies and controls across endpoint, identity, cloud, network, email, application, and data environments.
Drive execution of cybersecurity roadmap initiatives involving Zero Trust, identity security, cloud security, secure access technologies, security monitoring, data protection, and data governance capabilities.
Partner with Infrastructure, Cloud Engineering, application teams, and business stakeholders to integrate approved security requirements into systems, projects, and operational processes.
Execute cybersecurity governance activities established by leadership, including policy implementation, control validation, risk remediation tracking, audit support, evidence collection, and compliance coordination.
Review and approve third-party security assessments prepared by external risk partners, coordinate remediation or exception decisions, and escalate material concerns to cybersecurity leadership.
Manage cybersecurity vendor and service-provider relationships, monitor service performance, participate in product evaluations, and recommend technology or service improvements.
Assist with cybersecurity budget planning, renewal analysis, licensing requirements, and investment recommendations while operating within approved financial authority and priorities.
Assess operational metrics, control gaps, security findings, incidents, and emerging risks; establish corrective actions and communicate status, priorities, and recommendations to leadership and stakeholders.
Maintain cybersecurity operating procedures, incident response playbooks, technical standards, service documentation, and team workflows necessary for consistent and auditable operations.
Participate directly in technical investigations, engineering reviews, incident response, and high-priority remediation activities when additional expertise or leadership is required.
Promote security awareness and accountability by providing practical guidance to technical teams, business stakeholders, and project owners.