SR. Manager, Cybersecurity Governance

Jabil•Tampa, FL

About The Position

The Cybersecurity Governance Manager leads the day-to-day operation and continued development of the enterprise cybersecurity governance program. The role translates cybersecurity strategy, risk tolerance, regulatory obligations, and business priorities into policies, standards, accountability structures, performance measures, and governance routines. The manager works across Cybersecurity, IT, Legal, Privacy, Internal Audit, business units, and manufacturing operations to promote consistent execution and measurable improvement.

Requirements

Advanced knowledge of cybersecurity governance principles, operating models, and the relationship among Governance, Risk, and Compliance.
Strong knowledge of ISO/IEC 27001 and 27002, ISO 62443, NIST Cybersecurity Framework, risk management practices, and relevant regulatory requirements.
Experience developing policies, standards, governance procedures, exception processes, accountability models, and committee structures.
Experience establishing KPIs, KRIs, dashboards, maturity measures, and executive cybersecurity reporting.
Working knowledge of identity, data protection, third-party security, cloud, vulnerabilities, monitoring, incident management, resilience, acquisitions, and manufacturing or OT security.
Excellent written, verbal, facilitation, negotiation, and executive presentation skills.
Demonstrated people leadership, program management, prioritization, and change-management capabilities.
Ability to influence stakeholders across a global, matrixed organization and escalate material issues appropriately.
Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Computer Science, Business, Risk Management, or a related field. Equivalent relevant education and experience may be considered.
8+ years of progressive experience in cybersecurity, governance, technology risk, compliance, audit, or a related discipline.
3+ years leading people, enterprise programs, or cross-functional governance initiatives.
Experience with policy management, committees, executive reporting, metrics, exceptions, management systems, or control accountability.

Nice To Haves

Experience supporting a global, matrixed, regulated, or manufacturing organization with enterprise IT and operational technology environments.
Experience with acquisition governance, third-party security, data protection, or manufacturing cybersecurity.
CISSP, CISM, CISA, CRISC, CGEIT, ISO/IEC 27001 Lead Implementer or Lead Auditor, or a comparable credential.

Responsibilities

Manage the enterprise cybersecurity governance framework, operating model, and accountability structure.
Support initiatives aligned with cybersecurity strategy and business objectives.
Lead the lifecycle of cybersecurity policies, standards, and governance procedures.
Manage security exceptions and risk acceptance through approval, monitoring, and closure.
Coordinate governance committees, management reviews, and leadership forums.
Prepare executive dashboards, scorecards, decisions, and action tracking.
Develop and maintain cybersecurity KPIs and work with Cybersecurity Risk to develop KRIs.
Analyze trends and drive accountability for remediation commitments and performance gaps.
Maintain and improve the Information Security Management System.
Coordinate management reviews, corrective actions, audits, assessments, and supporting evidence.
Coordinate governance across identity, data protection, third parties, architecture, cloud, applications, vulnerabilities, security monitoring, incident management, resilience, and technology lifecycle.
Partner with manufacturing, engineering, site IT, and OT stakeholders to govern requirements supporting production continuity, safety, product quality, and operational resilience.
Oversee governance for cybersecurity due diligence, Day 1 readiness, assessments, integration visibility, remediation, transition arrangements, and risk acceptance for acquisitions.
Collaborate with Cybersecurity, IT, Legal, Privacy, Audit, Risk, Compliance, Procurement, Human Resources, BISOs, and business leaders to promote clear requirements and accountability.
Lead and develop governance personnel.
Set priorities and establish repeatable processes, templates, reporting practices, and quality expectations.
Recommend governance improvements based on regulatory change, assessments, incidents, metrics, exceptions, and lessons learned.