Manager of IT Security

Babcock Power•Marlborough, MA

6d•$120,000 - $165,000

About The Position

The Manager of IT Security provides leadership for day-to-day security operations while advancing the organization’s security strategy, operating model, and program maturity. The role directs and develops security personnel, oversees incident response and operational performance, and partners with business and IT leaders to manage cyber risk in a practical, business-aligned manner. The manager strengthens security operations, data protection, governance, risk and compliance, security awareness, vendor performance, and delivery of new security capabilities. The position requires sound cyber judgment, decisive ownership, clear communication, and the ability to translate technical risk into actionable business priorities. The role leads the security team and security operations model; directs major incident response; oversees threat detection and vulnerability management; guides security capability delivery, engineering, and automation; and leads Microsoft Purview maturity, risk and control assessments, audits, policy and exception management, the risk register, security awareness, and AI-use governance. It also manages security projects and vendors and reports on operations, risk, compliance, and program maturity.

Requirements

Substantial progressive experience in information security, including responsibility for security operations, incident response, risk management, and program delivery.
Demonstrated experience leading or developing security professionals and directing work in a complex, changing environment.
Working knowledge of governance, risk, and compliance principles and recognized frameworks, including ISO/IEC 27001 and NIST CSF.
Experience with Microsoft security technologies such as Microsoft Sentinel, Defender XDR, Microsoft Purview, Microsoft Entra, Defender for Cloud, and Defender for Office 365.
Experience with identity and access management, vulnerability management, network security, cloud security, data protection, email security, and security awareness programs.
Ability to lead major incident response efforts and communicate effectively with technical teams, business leaders, vendors, and auditors.
Ability to prioritize ambiguous, high-impact issues, make risk-based decisions, and maintain accountability for immediate response and long-term corrective action.
Strong written, verbal, presentation, negotiation, and stakeholder-management skills.

Nice To Haves

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; equivalent relevant experience may be considered.
Experience designing or improving a security operations operating model, including service levels, metrics, escalation paths, staffing considerations, and operational reporting.
Advanced knowledge of threat detection, incident response, threat hunting, security monitoring, and vulnerability remediation practices.
Experience implementing data protection and governance controls using Microsoft Purview across Microsoft 365 services and endpoints.
Experience with Entra Conditional Access, MFA, RBAC, privileged identity management, access reviews, Active Directory security, and authentication controls for legacy systems.
Experience with secure access service edge, firewalls, segmentation, Zscaler technologies, Azure security, and cloud security posture management.
Experience developing or overseeing automation using PowerShell, Microsoft Graph API, KQL, Logic Apps, APIs, or comparable technologies.
Experience managing security vendors, professional services, managed detection and response providers, licensing, budgets, and contract renewals.
Knowledge of AI governance and security risks, including data leakage, shadow AI, prompt injection, acceptable-use requirements, and risk assessment of AI tools.
One or more preferred certifications, or comparable credentials and experience: CISSP; CISM; CRISC or CISA; GSOM, GCIH, or similar operations and incident response credentials; or relevant Microsoft certifications such as SC-100, SC-200, SC-300, SC-400, or AZ-500.

Responsibilities

Lead, develop, and set priorities for the security team; delegate, coach, and establish accountability for outcomes.
Shape team direction, staffing, and operating standards, and build a high-performing, service-oriented culture.
Balance daily operations with project delivery, audit support, and long-term initiatives.
Own the security operations model, including queue health, escalation, service levels, key performance indicators, and continuous improvement.
Direct major incident response, coordinate stakeholders and executive communications, and maintain plans, playbooks, tabletop exercises, and post-incident reviews.
Oversee threat detection using Microsoft Sentinel and Defender XDR, and manage the vulnerability lifecycle from risk-based prioritization through remediation and reporting.
Evaluate, pilot, and operationalize security capabilities with infrastructure, application, cloud, and business teams.
Provide oversight for identity and access, network and cloud security, email security, and endpoint protection.
Guide security engineering and automation, including PowerShell, Microsoft Graph API, KQL, and SOAR, and ensure new capabilities transition to ongoing support.
Lead Microsoft Purview maturity, including classification, sensitivity labels, data loss prevention, retention, records management, and insider risk.
Lead risk and control assessments, audits, policy and exception management, and the risk register in alignment with ISO/IEC 27001 and the NIST Cybersecurity Framework.
Own the security awareness program and support governance of AI usage, including acceptable-use and risk requirements.
Translate threats, incidents, and program risk into clear business language for leadership, stakeholders, and auditors.
Lead concurrent security projects, managing scope, dependencies, budget, resources, and delivery risk.
Manage key security vendors and provide concise reporting on operations, risk, compliance, and program maturity.