Cyber Security Manager

Major Duties and Responsibilities: Cybersecurity Program Leadership Develop and maintain cybersecurity operational practices protecting infrastructure, applications, and operational technology systems. Establish security priorities aligned with organizational risk tolerance. Lead development of cybersecurity policies, procedures, and standards. Promote security awareness across the organization. Guide adoption of security-by-design principles. Security Operations and Monitoring Oversee monitoring of technology environments for security threats and vulnerabilities. Coordinate investigation and response to cybersecurity incidents. Direct containment, mitigation, and recovery activities. Support implementation of monitoring and detection technologies. Maintain incident response readiness. Risk Management and Compliance Conduct risk assessments across enterprise and operational technology environments. Identify vulnerabilities and recommend mitigation strategies. Support compliance with applicable regulatory and organizational requirements. Maintain security documentation and risk registers. Coordinate security audits and assessments. Infrastructure and Application Security Coordination Partner with Network Infrastructure Manager and Solutions Architect to ensure secure system design. Support secure configuration and hardening practices. Review technology implementations for security alignment. Promote least-privilege and identity governance practices. Support secure integration of operational technology systems. Vendor and Third-Party Security Oversight Evaluate cybersecurity posture of vendors and technology providers. Support procurement reviews involving security considerations. Monitor vendor compliance with security expectations. Coordinate remediation of identified risks. Organizational Collaboration and Advisory Serve as cybersecurity advisor to Technology leadership. Support business units in understanding security risks and responsibilities. Provide guidance during technology projects and system implementations. Communicate risk posture and security priorities to leadership. Continuous Improvement and Security Maturity Develop cybersecurity improvement roadmaps. Track emerging threats and evolving best practices. Recommend enhancements strengthening organizational resilience. Support development of long-term cybersecurity capabilities. Core Competencies: The position requires demonstrated competency in the following areas Cybersecurity Leadership and Governance Ability to establish and guide organizational cybersecurity practices balancing protection with operational needs. Defines practical security controls. Aligns security with organizational risk tolerance. Promotes accountability across technology domains. Risk Evaluation and Decision Making Ability to assess technical and operational risk in complex environments. Identifies systemic vulnerabilities. Prioritizes mitigation efforts. Makes defensible risk-based recommendations. Collaborative Technical Influence Ability to integrate security into diverse technology environments through partnership and expertise rather than direct authority. Builds trust across teams. Influences system design decisions. Encourages shared ownership of security outcomes. Incident Leadership and Resilience Ability to guide effective response during security events. Maintains composure during incidents. Coordinates cross-functional response. Drives post-incident learning and improvement. Minimum Qualifications: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field; or equivalent combination of education and experience. Six (6) years progressively responsible experience in cybersecurity or information security roles. Experience managing or leading security initiatives or programs. Knowledge, Skills and Abilities: Knowledge of: Cybersecurity frameworks and best practices. Threat detection and incident response methodologies. Identity and access management concepts. Infrastructure and network security principles. Vulnerability management and risk assessment practices. Security considerations for operational technology environments. Regulatory and compliance concepts affecting public-sector technology systems. Skill in: Evaluating cybersecurity risks and controls. Leading incident response coordination. Communicating technical risk to non-technical stakeholders. Developing policies and operational procedures. Analyzing security events and trends. Facilitating cross-functional collaboration.