IT Cybersecurity Manager
Cybersecurity Leadership & Governance
Develop, maintain, and execute MODEC's cybersecurity strategy, roadmap, and security governance framework.
Establish security policies, standards, procedures, and controls aligned with NIST Cybersecurity Framework (CSF), ISO 27001, CIS Controls, and applicable regulatory requirements.
Provide strategic guidance to executive leadership regarding cybersecurity risks, emerging threats, and recommended mitigation strategies.
Lead cybersecurity program maturity initiatives and continuous improvement efforts across the organization.
Develop and maintain cybersecurity metrics, KPIs and KRIs, including dashboards and executive reporting to track program maturity and risk exposure over time.
Risk Management & Compliance
Conduct enterprise security risk assessments and facilitate remediation planning.
Lead cybersecurity audits, assessments, and compliance activities.
Identify, assess, prioritize, and communicate cyber risks to senior leadership.
Ensure security controls are implemented and operating effectively.
Support third-party risk management, vendor security reviews, and technology acquisition processes.
Maintain awareness of evolving regulatory requirements, security standards, and industry best practices.
Own or coordinate data privacy compliance requirements (e.g., GDPR, LGPD where applicable), ensuring legal and regulatory data protection obligations are identified and met.
Maintain a comprehensive inventory of IT assets, software, and data repositories to support risk-based decision-making.
Security Operations
Oversee security monitoring, threat detection, vulnerability management, and incident response activities.
Lead investigations into cybersecurity incidents and coordinate containment, remediation, recovery, and post-incident reviews.
Ensure effective operation of security technologies including: SIEM platforms, Endpoint Detection & Response (EDR), Identity and Access Management (IAM), Multi-Factor Authentication (MFA), Email Security, Security Awareness Platforms, Vulnerability Management Solutions, Network Security and Firewalls, Cloud Security Controls.
Ensure timely remediation of vulnerabilities and management of cybersecurity risks.
Manage contracts, SLAs and performance of Security Service Providers and Tools, including renewal cycles, licensing and vendor performance reviews.
Security Architecture & Technology
Collaborate with infrastructure, cloud, application, and operational technology teams to ensure security-by-design principles are incorporated into solutions.
Evaluate and recommend new cybersecurity technologies, tools, and services.
Provide architectural guidance for cloud platforms, SaaS applications, networks, endpoints, and identity solutions.
Support implementation of Zero Trust security principles and modern security architectures.
Establish and oversee application security practices, including secure software development lifecycle (SDLC), code review standards and application vulnerability testing with risk-based.
Business Continuity & Resilience
Support cybersecurity aspects of business continuity, disaster recovery, and crisis management programs.
Participate in tabletop exercises and incident response simulations.
Ensure appropriate recovery processes exist for cyber-related disruptions.
Safety, Awareness & Training
Develop and maintain security awareness and training programs.
Foster a security-conscious culture across the organization.
Ensure employees understand their security responsibilities through ongoing education and communications.
Lead security awareness training initiatives.
Leadership & Team Development
Lead, mentor, and develop cybersecurity personnel.
Manage performance, training, and career development of team members.
Foster collaboration across global IT and business teams.
Manage cybersecurity projects and initiatives within budget and schedule expectations.