Sr. Manager, Enterprise Cybersecurity & Information Security

North Texas Tollway Authority • Gateway, CO

60d

About The Position

This role provides strategic and operational leadership for NTTA's enterprise cybersecurity, information security, cyber risk management, and regulatory compliance programs. This position is responsible for developing and executing a comprehensive cybersecurity strategy that protects organizational assets, critical infrastructure, customer information, and technology resources while enabling business objectives. The role serves as NTTA's senior cybersecurity leader, partnering with executive leadership, business stakeholders, and technology teams to manage cyber risk, ensure regulatory compliance, strengthen organizational resilience, and promote a culture of security awareness across the enterprise.

Requirements

• Bachelor's degree in computer science, information technology, business administration, engineering, or related field.
• A minimum of six (6) years of progressively responsible experience leading cybersecurity, information security, IT risk management, security operations, compliance, or related technology teams and functions, including supervisory or management experience.

Nice To Haves

• Master’s degree
• CISSP, CISM, CRISC, GIAC certifications and Certified Information Systems Auditor (CISA)

Responsibilities

• Develop, implement, and maintain NTTA's enterprise cybersecurity and information security strategy, roadmap, policies, standards, and governance framework aligned with organizational objectives while ensuring effective oversight, accountability, and alignment with business priorities and risk tolerance.
• Lead Cybersecurity Operations, threat detection, incident response, vulnerability management, and cyber resilience activities to protect critical business systems and infrastructure.
• Establish and maintain an enterprise cyber risk management program, including risk assessments, mitigation strategies, and reporting on cybersecurity risks and trends.
• Ensure compliance with applicable cybersecurity, privacy, and regulatory requirements, including PCI DSS, NIST Cybersecurity Framework, SOC controls, and other relevant standards.
• Lead cybersecurity awareness, education, and training initiatives to strengthen organizational security culture and reduce human risk factors.
• Develop and present cybersecurity metrics, risk assessments, program maturity updates, and incident reporting to senior leadership, executive and board.
• Direct third-party cybersecurity risk management activities, including security assessments, vendor reviews, contractual requirements, and ongoing monitoring of critical service providers.
• Partner with business and technology leaders to integrate security requirements into enterprise architecture, project delivery, cloud initiatives, data management, and operational processes.
• Lead and develop high-performing cybersecurity teams through recruitment, coaching, performance management, succession planning, and employee development while fostering a culture of innovation, accountability, collaboration, continuous improvement, and operational excellence.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager