Manager - Cyber Defence Strategy

GHD • Irvine, CA

13h • Onsite

About The Position

Who are we looking for? We're looking for a Manager of Cyber Defence Strategy and Operations to join our Information Systems team, based in Irvine, California. GHD is a global professional services company working across engineering, architecture, environment and advisory, helping our clients and communities meet the challenges of a changing world. Our Enterprise Strategy 2035, “We Master Technology,” places technology at the heart of how we deliver, and within Information Services & Technology (IS&T) our Cyber & Information Security function protects the organisation, our people and our clients. We are looking for a leader to own its strategy and its operational edge. As Manager - Cyber Defence Strategy and Operations , you will own GHD’s enterprise cybersecurity strategy and day-to-day operational resilience, and be the person who represents our cyber risk posture to the Chief Technology Officer, the IS Leadership Team and the Board Risk Committee. You will build genuine specialist depth beneath the Security Operations Centre, set and enforce enterprise security standards, and govern the security of an AI-era threat surface. This is both a strategic role and an operational command role, for a leader who is as credible in the boardroom as in the incident bridge. Working with an energetic and high performing team, this position offers a variety of work and will see you involved in:

Requirements

• 12+ years in cyber security, including building and leading specialist sub-functions (not just running a single SOC), ideally in a large or global organisation.
• Deep expertise across security strategy, operations, threat intelligence, vulnerability management and architecture, spanning cloud (Azure), endpoint, network, identity, application and data.
• Strong Zero Trust and Microsoft security stack expertise (Defender, Sentinel, Entra ID, Purview).
• Hands-on experience with regulatory frameworks: CMMC Level 2, FedRAMP, ASD Essential Eight, ISO 27001 and NIST CSF.
• A track record of taking an organisation through a regulatory certification, and of presenting cyber risk to executive or board-level audiences.
• Incident command experience, and the ability to set enterprise standards without creating adversarial relationships.
• Certifications : CISSP, CISM or equivalent (required); CMMC Registered Practitioner or Professional (highly desirable); Microsoft SC-100 or AZ-500 (desirable).

Nice To Haves

• CMMC Registered Practitioner or Professional (highly desirable)
• Microsoft SC-100 or AZ-500 (desirable)

Responsibilities

• Develop and own GHD’s multi-year cybersecurity strategy and target-state security architecture.
• Represent GHD’s cyber risk posture to the CTO, the IS Leadership Team and the Board Risk Committee.
• Build specialist sub-teams (security architecture, vulnerability management, cyber GRC) to relieve the SOC of non-response work and restore true follow-the-sun coverage.
• Own the enterprise vulnerability-management programme and drive a measured remediation cadence with clear ownership.
• Command incident response for significant events, coordinating IT, Legal, HR and Communications.
• Define and govern the Zero Trust programme across GHD’s Azure, identity and endpoint estate.
• Own GHD’s AI security posture: agentic systems, non-human identities and shadow AI.
• Govern CMMC Level 2 and FedRAMP readiness as a commercial enabler for US Federal client work.

Benefits

• We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation.
• Take on some of the world’s toughest challenges - with everyone at GHD backing you every step of the way.
• We'll give you control over your career, empower you to find innovative solutions and help you create a lasting impact.
• See where your commitment could take you with GHD!
• As a multicultural organization, we encourage individual achievement and recognize the strength of a diverse workforce.
• GHD is an equal opportunity employer.
• We provide equal employment opportunities to all qualified employees and applicants without regard to race, color, religion, genetic information, national origin, sex (including same sex), sexual orientation, gender identity, pregnancy, childbirth, or related medical conditions, age, disability or handicap, citizenship status, service member status, or any other category protected by federal, state, or local law.
• Upon request, GHD will provide reasonable accommodation for applicants with disabilities throughout the recruitment and selection process.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed