Cybersecurity Manager

The Cybersecurity & IT Risk Manager is responsible for defining, implementing, and overseeing the organization’s information security strategy, policies, processes, and controls. This role ensures the protection of digital assets, regulatory compliance, technology risk management, and incident response readiness in alignment with corporate guidelines and industry best practices. The position’s primary objective is to safeguard the confidentiality, integrity, and availability of information systems while strengthening organizational resilience against internal and external threats.

Key Responsibilities

Cybersecurity Strategy & Governance

• Develop and maintain the organization’s information security strategy aligned with business objectives and regulatory requirements.
• Design, implement, and oversee cybersecurity policies, procedures, and controls based on recognized standards and frameworks such as ISO/IEC 27001, NIST CSF, NIST SP 800-53, CIS Controls, PCI DSS, HIPAA, SOX, GLBA, and CCPA.
• Define and monitor cybersecurity KPIs, metrics, and executive dashboards.
• Promote a culture of security awareness, ethics, and responsible technology usage across the organization.

Risk Management & Compliance

• Identify, assess, and manage cybersecurity and technology risks while implementing mitigation and response plans.
• Coordinate and oversee internal and external security audits, including remediation tracking and corrective action plans.
• Ensure compliance with applicable privacy, cybersecurity, and data protection regulations.
• Collaborate with internal departments including IT, Legal, Compliance, Audit, and Operations to strengthen governance and risk management practices.

Incident Response & Resilience

• Lead cybersecurity incident response activities and crisis management efforts.
• Coordinate communications and response actions with key stakeholders during security incidents.
• Develop and maintain resilience and recovery strategies to minimize operational disruption.
• Manage relationships with external cybersecurity service providers and technology partners.

Leadership & Communication

• Prepare executive reports and presentations for leadership and governance committees.
• Promote security awareness and training initiatives for employees.
• Lead and mentor cybersecurity personnel while fostering collaboration and continuous improvement.
• Support organizational change management and crisis response initiatives.

Qualifications

Experience

• Minimum of 5 years of experience in information security or cybersecurity leadership roles.
• Experience in risk management, regulatory compliance, incident response, and cybersecurity project management.
• Proven experience leading teams and coordinating cross-functional initiatives.

Education

• Bachelor’s degree in Information Systems, Engineering, Computer Science, or a related field.

Technical Knowledge

• Strong knowledge of cybersecurity standards and frameworks including:
• NIST Cybersecurity Framework (CSF)
• NIST SP 800-53
• ISO/IEC 27001
• PCI DSS
• HIPAA
• SOX
• GLBA
• CCPA
• CIS Controls
• Knowledge of cybersecurity risk management methodologies and incident response frameworks.
• Understanding of privacy regulations and data protection practices.

Leadership & Soft Skills

• Strong analytical, planning, and organizational skills.
• Excellent written and verbal communication abilities.
• Strong leadership, teamwork, and collaboration skills.
• Proactive, results-oriented, and adaptable mindset.
• Experience managing change and crisis situations effectively.

Work Environment

This role primarily operates in a professional office environment with occasional coordination across operational and technical teams. The position may require interaction with external service providers, auditors, and regulatory stakeholders.