IT Security Manager

About the role

This hands-on leadership role owns and grows a security program while leading a team responsible for securing, hardening, and ensuring compliance of the organization’s technology environment. You’ll shape the security roadmap, lead daily operations, develop the team, and partner with infrastructure and business leaders to improve overall security posture.

Responsibilities

• Lead and develop a team of security engineers/administrators, including hiring, coaching, performance management, and career development.
• Own the security program across security operations, incident response, vulnerability management, security engineering, and GRC.
• Establish security standards, policies, processes, and metrics and continuously improve how security is managed.
• Lead response to significant security incidents and oversee remediation, root-cause analysis, and post-incident improvements.
• Manage vulnerability remediation, security assessments, penetration testing, audits, and compliance requirements.
• Oversee security technologies including SIEM, EDR, firewalls, IDS/IPS, endpoint protection, and related tools.
• Partner with infrastructure and technology leadership on security architecture, cloud security, access controls, hardening, and risk management.
• Manage relationships with MDR providers and other security vendors, holding partners accountable for service levels and results.
• Identify opportunities to automate security processes using scripting, SOAR, AI, and other emerging technologies.
• Translate business priorities and security risks into a practical roadmap of projects and improvements.
• Communicate security risks, priorities, and recommendations to technical teams and senior leadership.
• Build a security-first culture through awareness, education, and collaboration across the organization.

Requirements

• 7+ years of cybersecurity, information security, or security engineering experience.
• 3+ years leading or managing technical security professionals.
• Strong hands-on background with enterprise security tools such as SIEM, EDR, firewalls, IDS/IPS, and endpoint security.
• Experience across incident response, vulnerability management, security architecture, and security operations.
• Working knowledge of NIST and other security/compliance frameworks such as HIPAA or PCI-DSS.
• Experience managing security vendors, MDR providers, or other outsourced security services.
• A track record of improving security processes, operations, and efficiency through automation.
• Experience with AI-enabled security tools, SOAR, scripting, or other security automation technologies.
• Strong communication skills and the ability to explain technical security issues and business risk to senior leaders.
• A leadership style focused on developing people, building accountability, and creating a collaborative security culture.
• Ability to balance security requirements with business needs and usability.

Nice to Have

• CISSP, CISM, or similar security certification.
• Experience building or maturing an enterprise security program.
• Experience with security metrics, dashboards, and risk reporting.
• Experience across both cloud and on-premises environments.