WS - Senior Manager, Cybersecurity

The Senior Manager, Cybersecurity is a hands-on leader responsible for the day-to-day execution and oversight of the organization's cybersecurity program. This role combines direct technical contribution with the management and development of a small cybersecurity team, ensuring the confidentiality, integrity, and availability of the organization's information systems and data.

Team Leadership and Execution:
* Lead and develop a team of two cybersecurity professionals, providing coaching, prioritization, and performance management.
* Serve as a working manager - actively participating in technical execution alongside the team, not solely in an oversight capacity.
* Support the VP in shaping the cybersecurity strategy and translate it into actionable plans, priorities, and day-to-day activities.
Governance, Risk, and Compliance (GRC):
* Own the day-to-day GRC function, including cybersecurity policies, standards, procedures, and control frameworks.
* Maintain the cybersecurity risk register; identify, assess, and track risks and remediation activities.
* Support compliance with applicable regulations and frameworks (e.g., SOX, PCI, CMMC, NIST CSF).
* Coordinate internal and external audits, evidence collection, and control testing.
* Monitor regulatory and threat landscape changes and recommend policy updates.
* Manage third-party and vendor cybersecurity risk assessments.
* Perform software security reviews and drive remediation efforts.
Incident Response and Investigation:
* Maintain the incident response plan and lead hands-on response to cybersecurity incidents.
* Coordinate with internal teams, vendors, and external stakeholders during investigations.
* Perform root cause analysis and drive corrective actions.
Security Operations and Architecture:
* Participate directly in threat detection, monitoring, vulnerability management, and remediation activities.
* Support secure design of systems, networks, and cloud environments in partnership with infrastructure and application teams.
* Ensure security controls are consistently applied across the environment.
Security Awareness and Training:
* Manage the cybersecurity awareness and training program, including phishing simulations and end-user education.
* Promote a culture of security awareness across the organization.
Cybersecurity Tools and Services:
* Manage cybersecurity tools, platforms, and third-party service providers (e.g., MSSP, SIEM, EDR).
* Evaluate and recommend new technologies to strengthen the organization's security posture.
Reporting and Communication:
* Provide regular updates to the VP and other stakeholders on cybersecurity posture, key risks, and initiative status.
* Communicate technical concepts clearly to both technical and non-technical audiences.
Budget Support:
* Assist in developing and managing the cybersecurity budget, identifying cost-effective solutions and prioritizing spend against the highest risks.

Required Education and Experience:
* Bachelor's degree required in Computer Science, Information Systems, or other technical discipline (or equivalent experience).
* Relevant certifications (e.g., CISSP, CISM, CISA, GIAC) preferred.
* 8+ years of technical experience in cybersecurity or a combination of cybersecurity and closely related technical fields.
* 5+ years of hands-on experience performing threat detection and response.
* 7+ years of people management or team lead experience.

Required Skills and Abilities:
* Demonstrated ability to operate as a working manager - balancing direct technical contribution with team leadership.
* Experience with GRC activities, including policy management, risk assessment, and audit support.

Supervisory Responsibility:
Will manage a team of two Cyber Security Engineers.

Work Environment:
This is an in office role; not hybrid.

Travel Requirements:
0-10%

Physical Requirements:
The employee must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Eyesight and Auditory Skills must be sufficient to meet safety expectations of the position. The employee must be able to verbally communicate with employees, co-workers, and customers in person and by phone. The employee must also be able to travel to various work environments.