Cybersecurity Technology Manager

Cybersecurity Technology Manager

At BBH, partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. With a 200‑year legacy and a shared passion for what’s next, this is the right place to build a fulfilling career.

The Cyber Security Team is part of our Protect Pillar in Systems. The Protect Pillar is a unique BBH‑constructed framework designed for clear, centralized, and coordinated accountability: to protect against physical and logical security risks; to safeguard stakeholder assets; and to detect, prepare for, and respond effectively to security events. It encompasses Business Continuity and Disaster Recovery, Cybersecurity, Enterprise Data Protection and Data Governance, Global Security, and Information Security Management (“ISM”).

Reporting to the Head of Cybersecurity within the Cybersecurity Team, we are seeking an experienced Cybersecurity Technology Manager to join our team. The role will provide oversight across cloud security, application security, cyber technology governance, control deviations, remediation tracking, and senior management reporting.

• Cloud Security Oversight:
  Partner with Infrastructure, Configuration Management, Engineering, and Architecture teams to assess, oversee, and drive remediation of security configurations across Azure, Entra, and related technologies.
• Application Security Oversight:
  Partner with Systems stakeholders to review application configurations; support onboarding of new applications, including those with agentic AI capabilities; and validate alignment with security standards for entitlements, authentication, and related control requirements.
• Cyber Technology Oversight:
  Collaborate with Cybersecurity colleagues, platform owners, and application owners to review segmentation, authentication, security exceptions, configuration deviations, red team findings, and vulnerability remediation activity, ensuring new technologies align with security standards before onboarding.
• Policy and Control Deviations:
  Review and approve policy and control deviations, ensuring decisions are appropriately documented and aligned with organizational security standards.
• Communication and Reporting:
  Provide clear and timely updates to senior management on remediation progress, application assessments, emerging risks, and escalation items.

• Minimum of 10 years of cybersecurity experience, preferably within financial services, with a strong understanding of current cybersecurity threats and trends.
• Strong understanding of cybersecurity frameworks, regulations, and industry practices, including NIST, ISO, NYDFS Part 500, and DORA.
• Demonstrated ability to interpret cybersecurity controls and evaluate alignment with organizational standards.
• Strong written and verbal communication skills, with the ability to prepare clear executive‑level updates and documentation.
• Technical proficiency across IT systems, infrastructure, cloud platforms, and business applications.
• Ability to prioritize effectively, manage competing deadlines, and coordinate multiple security‑related activities simultaneously.
• Excellent analytical, problem‑solving, stakeholder management, and communication skills.

• Advanced PowerPoint and Excel skills, with experience developing executive‑level reporting materials and risk summaries.

Base salary $160,000 – $220,000 plus annual target bonus. BBH’s total rewards package includes discretionary bonuses, profit‑sharing, and benefits such as long‑term savings, healthcare, income protection, and professional development opportunities.

We value diverse experiences and transferrable skillsets. If your career path isn’t traditional or you don’t meet every qualification, you are encouraged to apply.

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, age, genetic information, creed, marital status, sexual orientation, gender identity, disability status, protected veteran status, or any other protected status under federal, state or local law.