Manager of IT Security

Babcock Power•Louisville, KY

6d•$120,000 - $165,000

About The Position

The Manager of IT Security provides leadership for day-to-day security operations while advancing the organization’s security strategy, operating model, and program maturity. The role directs and develops security personnel, oversees incident response and operational performance, and partners with business and IT leaders to manage cyber risk in a practical, business-aligned manner. The manager is responsible for strengthening security operations, data protection, governance, risk and compliance, security awareness, vendor performance, and delivery of new security capabilities. The position calls for sound cybersecurity judgment, decisive ownership, clear communication, and the ability to translate technical risk into actionable business priorities.

Requirements

Substantial progressive experience in information security, including responsibility for security operations, incident response, risk management, and program delivery.
Demonstrated experience leading or developing security professionals and directing work in a complex, changing environment.
Working knowledge of governance, risk, and compliance principles and recognized frameworks, including ISO/IEC 27001 and NIST CSF.
Experience with Microsoft security technologies such as Microsoft Sentinel, Defender XDR, Microsoft Purview, Microsoft Entra, Defender for Cloud, and Defender for Office 365.
Experience with identity and access management, vulnerability management, network security, cloud security, data protection, email security, and security awareness programs.
Ability to lead major incident response efforts and communicate effectively with technical teams, business leaders, vendors, and auditors.
Ability to prioritize ambiguous, high-impact issues, make risk-based decisions, and maintain accountability for immediate response and long-term corrective action.
Strong written, verbal, presentation, negotiation, and stakeholder-management skills.

Nice To Haves

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; equivalent relevant experience may be considered.
Experience designing or improving a security operations operating model, including service levels, metrics, escalation paths, staffing considerations, and operational reporting.
Advanced knowledge of threat detection, incident response, threat hunting, security monitoring, and vulnerability remediation practices.
Experience implementing data protection and governance controls using Microsoft Purview across Microsoft 365 services and endpoints.
Experience with Entra Conditional Access, MFA, RBAC, privileged identity management, access reviews, Active Directory security, and authentication controls for legacy systems.
Experience with secure access service edge, firewalls, segmentation, Zscaler technologies, Azure security, and cloud security posture management.
Experience developing or overseeing automation using PowerShell, Microsoft Graph API, KQL, Logic Apps, APIs, or comparable technologies.
Experience managing security vendors, professional services, managed detection and response providers, licensing, budgets, and contract renewals.
Knowledge of AI governance and security risks, including data leakage, shadow AI, prompt injection, acceptable-use requirements, and risk assessment of AI tools.
One or more preferred certifications or comparable credentials and experience: CISSP; CISM; CRISC or CISA; GSOM, GCIH, or similar operations and incident response credentials; or relevant Microsoft certifications such as SC-100, SC-200, SC-300, SC-400, or AZ-500.

Responsibilities

Lead and develop the security team by setting priorities, delegating, coaching, and holding team members accountable for outcomes.
Shape team direction, staffing, and operating standards, and build a high-performing, service-oriented culture.
Balance daily operations with project delivery, audit support, and long-term initiatives.
Own the security operations model, including queue health, escalations, service levels, key performance indicators, and continuous improvement.
Direct responses to major incidents, coordinate stakeholders and executive communications, and maintain incident plans, playbooks, tabletop exercises, and post-incident reviews.
Oversee threat detection using Microsoft Sentinel and Defender XDR, along with the full vulnerability management lifecycle from risk-based prioritization through remediation and reporting.
Evaluate, pilot, and operationalize security capabilities with infrastructure, application, cloud, and business teams.
Provide oversight for identity and access, network and cloud security, email security, and endpoint protection.
Guide security engineering and automation using technologies such as PowerShell, Microsoft Graph API, KQL, and SOAR, and ensure new capabilities transition to ongoing support.
Lead Microsoft Purview maturity, including classification, sensitivity labels, data loss prevention, retention, records management, and insider risk.
Lead risk and control assessments, audits, policy and exception management, and the risk register, aligned with ISO/IEC 27001 and the NIST Cybersecurity Framework.
Own the security awareness program and support governance of AI usage, including acceptable-use and risk requirements.
Translate threats, incidents, and program risk into clear business language for leadership, stakeholders, and auditors.
Lead concurrent security projects, managing scope, dependencies, budget, resources, and delivery risk.
Manage key security vendors and provide concise reporting on operations, risk, compliance, and program maturity.