Manager, Cyber Risk Advisor - Managed Risk

Sophos

49d • CA$110,000 - CA$183,000 • Remote

About The Position

The Manager, Cyber Risk Advisor is a senior-level individual who combines deep technical expertise in exposure management with hands-on people leadership. Reporting to the Director of Operations, this role is responsible for delivering an exceptional managed service experience to a portfolio of customers while also mentoring and day-to-day managing a team of Cyber Risk Advisors. On the technical side, you will lead complex advisory engagements, interpret vulnerability and attack surface data, and provide prioritized, context-driven remediation guidance that drives measurable risk reduction. On the people side, you will coach team members, oversee workload distribution, conduct regular 1:1s, contribute to hiring, evaluate performance and act as an escalation point for both customers and colleagues. Strong communication skills are essential — you will be equally comfortable presenting to a CISO and diving into raw scan data with an IT team.

Requirements

• 5+ years of experience in cybersecurity, with at least 1–2 years in a team lead, senior advisor, or people management role
• Demonstrated ability to lead, coach, and develop technical teams in a managed service environment
• Deep knowledge of vulnerability management, attack surface management (reduction), and common security frameworks (NIST, CIS, ISO, MITRE ATT&CK)
• Strong knowledge of enterprise networking concepts (routing, switching, VLANs, firewalls, VPNs, and remote access technologies)
• Hands-on experience with EASM/IASM tools, vulnerability scanning platforms (e.g., Tenable, Qualys), and remediation workflows
• Exceptional communication and advisory skills — fluent in both executive-level narratives and deep-dive technical discussions
• Proven ability to manage multiple customer relationships simultaneously, balancing strategic advisory with timely escalation of critical risks
• Experience owning or contributing to service delivery processes and operational metrics
• A collaborative leadership style with a proactive, problem-solving mindset and a genuine drive to help both customers and colleagues succeed

Nice To Haves

• Industry certifications such as CISSP, CISM, OSCP, CEH, or Security+; networking credentials such as CompTIA Network+ or equivalent
• Hands-on experience with Tenable Nessus and/or the Tenable One platform
• Background in Incident Response, Threat Intelligence, or Red/Blue Team operations
• Knowledge of cloud security (AWS, Azure, GCP) and securing hybrid and multi-cloud environments
• Prior experience in a managed security service provider (MSSP) or consultancy, including exposure to customer success or account management functions
• Experience presenting to and influencing C-suite and board-level stakeholders

Responsibilities

• Lead, mentor, and manage a team of Cyber Risk Advisors, fostering a high-performance culture grounded in continuous learning and accountability
• Conduct regular 1:1s, provide ongoing coaching and constructive feedback, and contribute to formal performance reviews
• Oversee day-to-day workload distribution across the team, ensuring coverage, quality, and adherence to existing service delivery processes
• Act as the primary escalation point for complex technical issues and customer concerns raised by team members
• Partner with the Director of Operations on team hiring, onboarding, and skills development planning
• Identify skill gaps within the team and drive targeted development initiatives and knowledge-sharing sessions
• Track and report on service-level and individual performance KPI metrics on a regular cadence, providing clear visibility to the Director of Operations and relevant stakeholders on team output, customer outcomes, and areas for improvement
• Serve as a senior-level, trusted Cyber Risk Advisor for a portfolio of customers, simplifying complex vulnerabilities, explaining real-world attack scenarios, and guiding customers toward the right risk mitigation decisions
• Lead high-stakes Cyber Risk Advisory sessions, contextualizing and prioritizing vulnerability and exposure findings, cyber risk trends, and overall security posture with the goal of facilitating measurable security outcomes
• Provide prioritized, context-driven remediation recommendations, helping customers focus on vulnerabilities most likely to be exploited by relevant threat actors
• Monitor customer environments for critical vulnerabilities, exposures, and emerging threats; escalate and advise on timely remediation with precision and urgency
• Ensure the Exposure Management service translates into measurable, reportable reductions in customers’ overall attack surface
• Serve as a technical quality bar for the team — reviewing advisor outputs, validating recommendations, and ensuring consistency and accuracy across all customer deliverables
• Build and maintain deep, trust-based relationships with customer stakeholders, serving as their primary strategic Exposure Management point of contact
• Identify customer expansion opportunities, risk posture trends, and service improvement areas; communicate these proactively to the Director of Operations
• Handle escalated customer issues with professionalism and urgency, driving fast resolution while preserving the customer relationship

Benefits

• bonus eligibility
• comprehensive benefits package

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed