Manager, Cybersecurity

If you’re looking for a purpose and not just a job, join the Smoothie King team and turn your purpose into a fulfilling passion!

We're not just the pioneers of the nutritional smoothie; we're the champions of inspiring people to live a healthy and active lifestyle. With over 1300 stores and counting, we’ve grown to become the largest nutritional smoothie bar in the nation, with a simple recipe for success:
Hire the best people, use the best ingredients, and blend with a purpose.

At Smoothie King, we're serious about our clean ingredients and passionate about our guests' health and wellness journeys—but that doesn't mean we don't know how to have a good time. Here, you'll find work that's equal parts challenging and rewarding, all within a culture that's as amazing as our smoothies. We're committed to continuous improvement, achieving our goals, and fostering a supportive and collaborative environment where every team member can thrive.

The Manager, Cybersecurity is responsible for the day-to-day leadership and execution of Smoothie King’s cybersecurity program and security operations. This role independently assesses risk, establishes priorities, recommends appropriate courses of action, and drives security issues through remediation and closure.

The role requires sufficient technical depth to evaluate security findings, telemetry, vulnerabilities, architecture, and control gaps; provide informed direction to technical teams and vendors; and balance immediate risk reduction with longer-term program maturity.

• Own the identification, prioritization, remediation, validation, and closure of cybersecurity risks and findings, prioritizing immediate risk reduction while maintaining disciplined scope.
• Execute and continuously improve cybersecurity strategy, standards, policies, and procedures in alignment with business objectives and established risk tolerance.
• Provide technical and operational security leadership across Azure, identity, endpoint, network, infrastructure, vulnerability management, and security monitoring.
• Evaluate cybersecurity risk, determine appropriate courses of action, and elevate material risks with clear recommendations.
• Lead cybersecurity incident response and oversee SOC and managed security partners through investigation, containment, remediation, recovery, and corrective action.
• Lead cybersecurity compliance and assurance activities, including PCI DSS, security assessments, penetration testing, and remediation of identified gaps.
• Partner with technology and business teams to integrate appropriate security controls without unnecessarily impeding delivery.
• Manage cybersecurity vendors, third-party risk activities, and assigned budgets, holding partners accountable for performance and outcomes.
• Develop and communicate cybersecurity KPIs, risk metrics, material risks, and recommendations to leadership.
• Lead cybersecurity awareness initiatives and drive security projects to measurable outcomes with clear ownership and timelines.
• Stay current on emerging threats and technologies and translate relevant developments into practical security improvements.

• Strong understanding of cybersecurity frameworks and risk management practices, including NIST, CIS Controls, ISO 27001, and PCI DSS.
• Strong technical knowledge across Azure/Entra , identity, endpoint, network, vulnerability management, logging, monitoring, and threat detection.
• Ability to independently assess security findings, telemetry, attack paths, vulnerabilities, and control gaps.
• Strong risk-based judgment and bias for action, including the ability to make timely decisions under ambiguity, prioritize remediation, and elevate material risks with clear recommendations.
• Demonstrated experience leading incident response, vulnerability remediation, security assessments, penetration testing, and audit activities through closure.
• Experience managing cybersecurity vendors, SOC providers, third-party risk, budgets, and resources.
• Strong people leadership, execution discipline, and ability to drive multiple initiatives to measurable outcomes.
• Strong written and verbal communication skills with the ability to translate technical…