Job Description

ROLE

The Senior Cyber Security Manager leads and supports ongoing cybersecurity activities, incident management, and projects. This role is at the forefront of safeguarding our organization's digital assets. Collaborates closely with leaders, IT teams, vendors, and cross-functional peers to ensure effective monitoring and vulnerability management. Working alongside a dedicated team, responsibilities include maintaining security systems, identifying vulnerabilities, and devising robust strategies to mitigate cyber threats and safeguard sensitive data.

ESSENTIAL RESPONSIBILITIES

• Manage the development, implementation, and monitoring of the organization's cybersecurity strategy and policies.
• Maintain security systems, identify vulnerabilities, and devise strategies to prevent cyber threats and data breaches.
• Manage the overall security posture and risk management program for on-premises and cloud-based solutions, focusing on delivering measurable outcomes and continuous improvement; Establish performance metrics and key performance indicators (KPIs) to measure the effectiveness of your team's efforts.
• Lead and support cybersecurity initiatives, including vulnerability remediation, infrastructure monitoring, incident management, and analytics reporting.
• Assume the designated leader role, where applicable, for the Cyber Incident Response Team, communicates the incident to senior leaders, and engages team members in responding to the incident.
• Manage cybersecurity budgets, projects, incidents, legal matters, and compliance efforts.
• Provide high-level technical leadership in risk assessments, implementation, and operational aspects of information security procedures and products.
• Foster a culture of security awareness through training programs and communication efforts.
• Collaborate with cross-functional teams to integrate cyber security into projects, systems, and processes.
• Define policy, recommend security controls, and provide all-inclusive costs for the implementation and management of cybersecurity solutions enterprise-wide.
• Provide leadership and guidance and identify development opportunities for the cybersecurity team members.
• Stay abreast of the latest information security threats, trends, and technologies, adapting security measures accordingly.
• Ensure compliance with relevant laws and regulations, such as SOC2, ISO, GDPR, NIST, and CCPA; collaborate with legal, risk, and compliance teams as required.
• Other duties as assigned.

QUALIFICATIONS

Any combination of education and experience that would likely provide the required knowledge, skills and abilities is qualifying. A typical way to qualify is:

• Six years of IT experience, with at least five years in cybersecurity or IT infrastructure, and five years in leadership roles preferred.
• Strong background in infrastructure and experience managing cybersecurity activities and fixes.
• Working knowledge of cybersecurity operations, technologies, processes, and policies.
• Ability to effectively communicate cybersecurity risks and strategies to stakeholders and IT teams.
• Proficiency in both oral and written communication, including executive-level presentations.
• Ability to work at all organizational levels and communicate effectively with senior leadership.
• Strong leadership skills and ability to adhere to strict confidentiality requirements.
• Proficiency in Microsoft Office applications.
• Familiarity with compliance frameworks such as SOC2, ISO, GDPR, NIST, and CCPA.
• Industry certifications such as CISSP or CISM preferred.
• Principles of employee training, supervision, and evaluation.
• Supervisory techniques, resource allocation, planning, and budgeting.
• Driver’s license required.
• Mastery of California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Payment Card Industry Security Standard (PCI DSS), California Data Breach Notification Laws, California Information Security Office (CISO) Policies and Guidelines and other relevant data and cyber security standards and requirements.
• Bachelor's degree or equivalent working experience preferred.