Sr. Manager, Cyber Security

Department:
Information Technology

Employment Type:

Full-Time

Requisition
Date Posted:
June 25, 2026
Closing Date:
July 9, 2026 or until filled

Reporting to the Director, Cyber Security & Infrastructure
, the Sr. Manager, Cyber Security is responsible for leading UFA’s cybersecurity program and advancing the organization’s cyber defense capabilities. This role manages UFA cybersecurity capabilities end-to-end, including security operations, threat detection and response, digital forensics, threat intelligence, vulnerability management, security architecture, cyber defense technologies, and the continuous improvement of operational security processes and controls.

• Lead and develop UFA's Cyber Security team by providing strategic direction, coaching, performance management, succession planning, and talent development to build a high-performing cybersecurity function.
• Oversee Cyber Security Operations including threat monitoring, detection, investigation, incident response, digital forensics, and vulnerability management to protect UFA's information assets and business operations.
• Drive continuous improvement of cyber defense capabilities through the implementation and optimization of security technologies, automation, threat intelligence, threat hunting, and security analytics.
• Provide operational leadership during cybersecurity incidents
  , coordinating response activities, stakeholder communications, containment efforts, recovery actions, and post-incident reviews.
• Partner with business and technology leaders to identify, assess, and mitigate cybersecurity risks while ensuring security requirements are integrated into enterprise initiatives and operational processes.
• Contribute to the development and execution of UFA's cybersecurity strategy, roadmap, and governance framework
  , ensuring alignment with business objectives, regulatory requirements, and industry best practices.
• Manage cybersecurity vendors, service providers, technology investments
  , ensuring solutions and services effectively support organizational security objectives and operational requirements.
• Develop and communicate cybersecurity metrics, reporting, and risk insights to leadership, providing actionable recommendations that support informed decision-making and continuous improvement of UFA's security posture.
• Other duties as required.

• A post-secondary diploma in a relevant field or equivalent combination of education and experience. Professional certifications such as CISSP, CISM, GIAC (GCIH, GCIA, GCFE, GCFA), Microsoft Security certifications (SC-100, SC-200), AZ-500, or equivalent are considered strong assets.
• 10+ years of progressive cybersecurity experience, including at least 4 years leading cybersecurity operations, security engineering, incident response, threat management, or related cybersecurity functions in a complex enterprise environment.
• Expert knowledge of cybersecurity operations, threat detection and response, digital forensics, threat intelligence, vulnerability management, security analytics, automation, network security, and risk-based security practices.
• Expert knowledge of Microsoft security technologies including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra , Microsoft Defender for Cloud, Microsoft Purview, Data Loss Prevention (DLP), and related Microsoft security capabilities.
• Strong execution and delivery focus, with a proven ability to lead cross-functional initiatives, drive operational excellence, remove obstacles, hold teams accountable, and successfully deliver cybersecurity programs, projects, and continuous improvement initiatives.
• Strong leadership experience building, developing, and managing high-performing technical teams, including coaching, performance management, succession planning, and talent development.
• Working knowledge of cybersecurity frameworks and standards, including NIST Cybersecurity Framework (CSF), CIS Controls, ISO 27001, and MITRE ATT&CK.
• Strong understanding of cloud security principles and architectures, particularly within Microsoft Azure environments, as well as identity-centric and Zero Trust security models.
• Strong…