Manager of IT Security

Babcock Power•Louisville, KY

About The Position

The Manager of IT Security leads day-to-day security operations while advancing the organization’s security strategy, operating model, and program maturity. The role directs and develops security personnel, oversees incident response and operational performance, and partners with business and IT leaders to manage cyber risk in a practical, business-aligned manner. Responsibilities span security operations, data protection, governance, risk and compliance, security awareness, vendor performance, and delivery of new security capabilities. The successful candidate applies sound cyber judgment, takes decisive ownership, communicates clearly, and translates technical risk into actionable business priorities. The Manager leads and develops the security team, establishes priorities and operating standards, and balances daily operations with project delivery, audit support, and long-term initiatives. The role owns the security operations model and major incident response, oversees threat detection and vulnerability management, and guides the evaluation and operationalization of security capabilities. It also leads Microsoft Purview maturity, risk and control assessments, audits, policy and exception management, the risk register, security awareness, and governance of AI usage. The Manager leads security projects and vendors and reports on operations, risk, compliance, and program maturity. The position requires substantial progressive information security experience, including security operations, incident response, risk management, program delivery, and demonstrated experience leading or developing security professionals. A bachelor’s degree in a related field is preferred, though equivalent relevant experience may be considered. The base pay range is $125,000–$165,000 annually; actual offers may vary based on factors including education, experience, licenses, and certifications.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred; equivalent relevant experience may be considered.
Substantial progressive information security experience, including responsibility for security operations, incident response, risk management, and program delivery.
Demonstrated experience leading or developing security professionals and directing work in a complex, changing environment.
Working knowledge of governance, risk, and compliance principles and recognized frameworks, including ISO/IEC 27001 and NIST CSF.
Experience with Microsoft security technologies such as Microsoft Sentinel, Defender XDR, Microsoft Purview, Microsoft Entra, Defender for Cloud, and Defender for Office 365.
Experience with identity and access management, vulnerability management, network security, cloud security, data protection, email security, and security awareness programs.
Ability to lead major incident response efforts and communicate effectively with technical teams, business leaders, vendors, and auditors.
Ability to prioritize ambiguous, high-impact issues, make risk-based decisions, and maintain accountability for immediate response and long-term corrective action.
Strong written, verbal, presentation, negotiation, and stakeholder-management skills.

Nice To Haves

Experience designing or improving a security operations operating model, including service levels, metrics, escalation paths, staffing considerations, and operational reporting.
Advanced knowledge of threat detection, incident response, threat hunting, security monitoring, and vulnerability remediation practices.
Experience implementing data protection and governance controls using Microsoft Purview across Microsoft 365 services and endpoints.
Experience with Entra Conditional Access, MFA, RBAC, privileged identity management, access reviews, Active Directory security, and authentication controls for legacy systems.
Experience with secure access service edge, firewalls, segmentation, Zscaler technologies, Azure security, and cloud security posture management.
Experience developing or overseeing automation using PowerShell, Microsoft Graph API, KQL, Logic Apps, APIs, or comparable technologies.
Experience managing security vendors, professional services, managed detection and response providers, licensing, budgets, and contract renewals.
Knowledge of AI governance and security risks, including data leakage, shadow AI, prompt injection, acceptable-use requirements, and risk assessment of AI tools.
One or more preferred certifications or comparable credentials and experience: CISSP; CISM; CRISC or CISA; GSOM, GCIH, or similar operations and incident response credentials; or relevant Microsoft certifications such as SC-100, SC-200, SC-300, SC-400, or AZ-500.

Responsibilities

Lead, develop, prioritize, coach, and delegate work to the security team; establish accountability, staffing direction, operating standards, and a service-oriented culture.
Balance daily security operations with project delivery, audit support, and long-term initiatives.
Own the security operations model, including queue health, escalations, service levels, key performance indicators, and continuous improvement.
Direct major incident response, coordinate stakeholders and executive communications, and maintain response plans, playbooks, tabletop exercises, and post-incident reviews.
Oversee threat detection using Microsoft Sentinel and Defender XDR and manage the vulnerability lifecycle from risk-based prioritization through remediation and reporting.
Evaluate, pilot, and operationalize security capabilities with infrastructure, application, cloud, and business teams.
Oversee identity and access, network and cloud security, email security, and endpoint protection capabilities.
Guide security engineering and automation, including PowerShell, Microsoft Graph API, KQL, and SOAR, and ensure new capabilities transition to ongoing support.
Lead Microsoft Purview maturity, including classification, sensitivity labels, data loss prevention, retention, records management, and insider risk.
Lead risk and control assessments, audits, policy and exception management, and the risk register in alignment with ISO/IEC 27001 and the NIST Cybersecurity Framework.
Own the security awareness program and support governance of AI usage, including acceptable-use and risk requirements.
Translate threats, incidents, and program risk into clear business language for leadership, stakeholders, and auditors.
Lead concurrent security projects and manage scope, dependencies, budget, resources, and delivery risk.
Manage key security vendors and provide concise reporting on operations, risk, compliance, and program maturity.