Security Manager Jobs

About The Position

Requirements

• Bachelor’s degree.
• At least 7 years of experience in cybersecurity or information technology.
• At least 6 years of experience evaluating, contributing to, or supporting the development of cybersecurity capabilities.
• At least 4 years of experience in Product Management.
• At least 4 years of experience in Identity and Access Management (IAM).

Nice To Haves

• 7+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, or FedRAMP.
• 7+ years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events.
• 7+ years of experience working on teams and presenting cybersecurity information such as metrics, threat intelligence, controls, or requirements to stakeholders.
• 6+ years of experience working in multi-cloud environments.
• 6+ years of experience using security tools such as Splunk, CrowdStrike, Qualys, or AWS Security Hub.
• 3+ years of experience developing or interpreting cybersecurity metrics or dashboards.
• 3+ years of people management experience.
• 2+ years of experience developing or overseeing cybersecurity or technology risk programs.
• Familiarity with industry governance or financial governance processes.
• Advanced experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
• Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders.

Responsibilities

• Lead, mentor, and develop associates by setting expectations, providing actionable feedback, and supporting career progression.
• Advise on cybersecurity best practices for reducing risk through the configuration of cybersecurity tools and platforms.
• Support the development, modification, and use of capability, risk, and threat classification frameworks and standardization methodologies for evaluating capability, maturity, and effectiveness.
• Support continuous improvement programs, including identifying risks and issues, implementing corrective actions, and validating results.
• Identify and operationalize linkages among threats and risks, controls and capabilities, tooling, and data analytics to inform initiative prioritization and resource allocation.
• Lead solutioning and manage activities responding to large-scale enterprise risk reduction efforts.
• Communicate operational, compliance, process, control, and tooling gaps and potential remediation approaches to audiences including leadership.
• Lead cross-domain cybersecurity risk assessments and capability reviews, aligning enterprise control standards with business objectives and regulator expectations.
• Influence and coordinate risk reduction initiatives across multiple cyber programs, driving consistency in control design, testing, and reporting practices.

Benefits

• Comprehensive health, financial, and other benefits supporting total well-being.
• Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.