Senior Manager, IT Security and Risk Management

For more than 40 years, Reworld has been a leader in sustainable waste solutions, providing our customers with innovative solutions that help them achieve carbon-negative outcomes.

Reworld is leading the charge to a carbon-negative future through revolutionary sustainable materials management solutions that reduce, reuse, recycle and reimagine waste for the benefit of society and the environment.

Reworld partners with businesses by offering cutting-edge engineering and innovative solutions, to help customers reduce, reuse, recycle and recover value from waste streams and meet or exceed their sustainability goals.

Reworld's differentiator comes from our ecosystem of technology, facilities and partnerships, trusted by the world’s largest organizations to reimagine waste management for a smarter, more sustainable world.

The Senior Manager, IT Security and Risk Management is a hands‑on technical leader responsible for advancing Reworld’s NIST‑aligned security roadmap across enterprise, cloud, and operational technology environments. The role leads vulnerability and exposure management, threat detection, incident response, network and cloud security, OT resilience, and secure adoption of application and AI technologies. Working across Security, IT, OT, Legal, GRC, and business teams, this position strengthens technical controls, supports compliance requirements, and translates cyber risk into clear business decisions.

• Lead and continuously improve the risk‑based vulnerability and exposure management program, including scanning coverage, asset attribution, prioritization, remediation timelines, exceptions, and validation of closure.
• Prioritize risk using exploitability, external exposure, attack paths, asset criticality, business impact, and compensating controls; partner with technology and OT owners to drive remediation and elevate overdue risk.
• Coordinate penetration tests and external attack‑surface reviews, verify corrective actions, and report coverage, aging, remediation performance, trends, and residual risk to technical and executive audiences.

• Develop and tune detections across endpoint, identity, network, cloud, application, email, and OT telemetry using threat intelligence and attacker behaviors.
• Lead incident triage, technical investigation, containment, recovery, evidence preservation, root‑cause analysis, and post‑incident review in coordination with internal teams and external partners.
• Maintain and test incident‑response playbooks for ransomware, identity compromise, data loss, third‑party, cloud, and OT scenarios; use automation and AI‑assisted analysis to improve alert quality and investigation speed with appropriate human validation.

• Design and improve network security across enterprise and industrial environments, including firewalls, segmentation, secure remote access, network access control, internet egress, third‑party connectivity, and resilient architecture.
• Assess and strengthen security across Azure, AWS, SaaS, servers, containers, infrastructure as code, and enterprise platforms, including encryption, secrets management, logging, monitoring, workload protection, and secure administrative access.
• Embed secure architecture reviews, configuration baselines, validation, dependency scanning, and security testing into CI/CD and change processes; support M&A discovery and remediation of inherited assets, identities, exposures, and control gaps.

• Extend security visibility, monitoring, access control, vulnerability management, and incident…