Cybersecurity Manager

Overview

Position summary

The Cybersecurity Manager leads and executes the enterprise cybersecurity program across a growing manufacturing organization. Reporting to the CIO, this role is a hands-on player-coach responsible for both executing and leading cybersecurity operations, risk management, incident response, security architecture, and team leadership.

The Cybersecurity Manager will own and drive execution of the cybersecurity maturity roadmap, primarily aligned to the NIST Cybersecurity Framework, while also ensuring alignment with CMMC, ITAR, customer security requirements, and cyber insurance expectations.

This role will expand cybersecurity practices from traditional IT environments into Operational Technology (OT) and manufacturing environments while remaining actively involved in day-to-day cybersecurity activities.

Essential Job Functions

Cybersecurity Program, Governance & Risk

• Own and execute the enterprise cybersecurity maturity roadmap, including prioritizing and leading security improvement initiatives from planning through implementation.
• Maintain the cybersecurity risk register, remediation plans, risk acceptance, and leadership reporting.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Ensure alignment with NIST, CMMC, ITAR, customer security, cyber insurance, and other applicable requirements.
• Develop and report cybersecurity KPIs and KRIs.
• Partner with business and technology leaders to identify and reduce cybersecurity risk.

Security Operations & Incident Response

• Provide hands‑on technical leadership and directly participate in security monitoring, vulnerability management, endpoint security, identity and access management, email security, logging, and network security.
• Serve as the primary cybersecurity incident lead, coordinating investigation, containment, remediation, recovery, post‑incident review, and internal and external response resources.
• Participate in after‑hours response and escalation when significant incidents occur.
• Continuously evaluate security controls, tools, vulnerabilities, and emerging threats.

Security Architecture & OT Cybersecurity

• Review new systems, applications, infrastructure, cloud services, integrations, and technology projects and establish practical cybersecurity requirements.
• Partner with infrastructure, applications, and business teams to incorporate security into solution design.
• Develop and mature cybersecurity practices for manufacturing and Operational Technology environments, including risk assessment, segmentation, access, monitoring, and incident response.

Third-Party & Partner Management

• Serve as the primary relationship manager for MDR/MSSP providers, security integrators, testing firms, and other cybersecurity partners.
• Manage vendor performance, escalations, service effectiveness, and improvement opportunities.
• Evaluate cybersecurity products and services and recommend cost‑effective solutions.

Team Leadership & Cybersecurity Culture

• Lead, coach, and develop cybersecurity team members, including the IT Security Operations Engineer and Cybersecurity Risk Analyst.
• Establish priorities across security operations, risk, governance, resilience, and awareness.
• Remain actively involved in technical cybersecurity execution while building the capabilities of the cybersecurity team.
• Communicate cybersecurity risks and priorities effectively to technical and non‑technical audiences.

#LIJW1

Minimum Requirements, Education & Experience (incl. KSA’s and certifications)

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or an equivalent combination of education and relevant experience.
• 5+ years of cybersecurity, information security, security engineering, or…