Manager, Cybersecurity

EOS•Erie, CO

3d•Hybrid

About The Position

The Cybersecurity Manager is a strategic, hands-on role responsible for advancing our enterprise security program in alignment with ISO 27001, NIST Cybersecurity Framework, and industry best practices. This role offers the opportunity to lead the design and implementation of robust security strategies, work collaboratively across business functions, and be a part of a resilience security culture that supports innovation and organization growth.

Requirements

Deep understanding of NIS Cybersecurity Framework and ISO 27001
Proficiency in security tools (SIEM, EDR/XDR, IDP/IDS, etc.) and scripting languages e.g., Python, PowerShell)
Extensive experience in cybersecurity leadership, information security management, or risk management in high-growth environments
Deep understanding of manufacturing systems, IT/OT networks segmentation, and industrial cybersecurity risks
Demonstrated expertise in cloud, network, and application security, including threat detection, incident response, and vulnerability management
Incident response lifecycle: detection, containment, eradication, recovery, and post-incident improvement
Regulatory and audit expectations relevant to manufacturing and global operations
Third-party and supply chain cybersecurity risk management
Solid understanding of cybersecurity protocols for a Windows (Version 7+), Linux and Mac computing environment
Solid understanding of Office 365 cloud principles, Azure security, and Exchange/Purview security configuration
Excellent communication skills, including the ability to communicate cybersecurity risk clearly to non-technical leaders
Ability to be on call if/when required for onsite and/or remote work after hours or on weekends
Bachelor’s degree in cybersecurity, information technology, computer science, or related field.
Eight (8+) or more years of progressive cybersecurity experience
5-7+ years of implementing cybersecurity best practices supporting manufacturing, industrial, or OT environments
Experience with advancing cybersecurity programs in high-growth organizations
Experience with cybersecurity processes/programs within $1B+ organizations strongly preferred
Prior leadership, coaching, or lead-level role managing cybersecurity initiatives or teams
Experience supporting cybersecurity initiatives in a global, 24x7 operating environment strongly preferred

Nice To Haves

Experience with product (hardware and software) hardening strongly preferred
Professional certifications such as CISSP, CISM, CISA, ISO 27001, or GIAC GSEC, GICSP for OT environments, etc. strongly preferred

Responsibilities

Partner with cross-functional teams to implement a multi-year cybersecurity roadmap aligned with business growth
Conduct and maintain enterprise risk assessments, including IT, OT, Product, Field Operations, and third-party risk
Establish and lead security operations, including monitoring, alerting, and incident response
Partner with IT management team to test incident response and disaster recovery plants
Analyze and recommend responses to security incidents, investigations, and remediation activities
Coordinate with external partners, MSSPs, and law enforcement as required
Partner with IT, OT & Field Services teams to maintain and advance secure architectures for enterprise and manufacturing environments
Evaluate, recommend, and implement innovative security tools and technologies to strengthen detection, protection, and response capabilities.
Partner with engineering to advance product cybersecurity practices, including hardening techniques, secure coding, and testing practices
Maintain secure integrations between IT, OT, MES, ERP, cloud, product and data platforms
Maintain and advance vulnerability management, penetration testing, and remediation processes
Monitor emerging cybersecurity threats, regulatory requirements, and industry trends to ensure program remains resilience and forward-looking
Maintain and oversee third-party policies, security assessments and vendor risk management
Promote a proactive security culture through training, awareness programs, and guidance across the organization
Maintain and advance security awareness and training programs for employees
Embed cybersecurity accountability into IT, OT, product, field operations, and business processes
Act as a trusted advisor to leadership on cybersecurity risk and investment