Senior Manager, Cybersecurity

Groundworks•Dallas, TX

3d•Onsite

About The Position

The Senior Manager, Cybersecurity leads the design, implementation, and continuous improvement of Groundworks’ cybersecurity program to safeguard the organization’s technology environment, reduce enterprise risk, and ensure regulatory compliance. This role bridges cybersecurity strategy and hands-on operational execution, aligning security initiatives with business priorities, resilience objectives, and growth strategies. The Senior Manager partners across IT, cloud, infrastructure, and business functions to embed security into day-to-day operations while building scalable, measurable, and mature security capabilities.

Requirements

Bachelor’s degree in computer science, Information Security, or a related field; Master’s degree preferred.
8+ years of progressive cybersecurity experience.
Minimum 3+ years in management or team lead role.
Demonstrated success operating within lean, fast-growing, or private equity-backed environments.
Hands-on experience with SIEM, EDR, DLP, IAM, CSPM, and vulnerability management tools.
Strong understanding of modern security architectures including Zero Trust and identity-centric security models.
Working knowledge of cloud security concepts including workload protection, configuration management, and compliance monitoring.
Experience supporting audit readiness and continuous compliance programs.
Experience securing cloud environments, with preference for Azure; AWS and GCP experience is a plus.
Demonstrated ability to translate risk into business outcomes.
Strong stakeholder communication skills across technical and non-technical audiences.
Results-oriented with a focus on measurable performance.
Ability to build repeatable processes and drive operational maturity.
Experience mentoring and developing cybersecurity professionals.
It is an essential function of this job that the employee regularly and reliably reports to work on time each working day

Nice To Haves

Master’s degree preferred.
Professional certifications such as CISSP, CISM, CCSP, or equivalent strongly preferred.
AWS and GCP experience is a plus.

Responsibilities

Lead the design, implementation, and ongoing management of the enterprise cybersecurity program and roadmap aligned with business objectives and risk priorities.
Define program metrics and reporting to communicate risk posture, progress, and investment impact to leadership.
Foster shared accountability for cybersecurity and chair cross-functional governance forums to drive informed decision-making.
Mentor and develop cybersecurity team members, establishing clear expectations and growth plans.
Oversee and actively participate in security operations, including monitoring, detection, response, incident investigations, remediation, and post-incident reviews.
Implement advanced monitoring, automation, and threat intelligence capabilities to enhance detection, response times, and defensive posture.
Manage vulnerability management across cloud, servers, applications, and network infrastructure.
Partner with infrastructure teams to ensure secure configuration, patching, and hardening of Windows and Linux servers, virtualized environments, cloud workloads, and network environments including LAN, WAN, firewalls, VPN, SD-WAN, and segmentation.
Drive strategic security initiatives such as Zero Trust, network segmentation, and identity and access management.
Lead cloud security initiatives including workload protection, IAM, and compliance monitoring, and collaborate with development teams to promote secure coding practices and security testing such as SAST and DAST.
Lead cyber risk assessments and controls audits using frameworks such as NIST and CIS Controls, and ensure compliance with SOC 2, ISO 27001, PCI-DSS, SOX, CCPA/CPRA, PIPEDA, and CASL.
Develop, enforce, and monitor security policies, standards, and third-party risk management practices.
Integrate cybersecurity into business continuity and disaster recovery planning, oversee secure system recovery following incidents, and monitor cyber resilience through defined metrics and post-incident reviews.