Lead Engineer, Cybersecurity

Forbes is an iconic global media brand that has symbolized success for over a century. Fueled by journalism that informs and inspires, Forbes spotlights the doers and doings shaping industries, achieving success and making an impact on the world. Forbes connects and convenes the most influential communities ranging from billionaires, business leaders and rising entrepreneurs to creators and innovators. The Forbes brand reaches more than 140 million people monthly worldwide through its trusted journalism, signature Forbes Live events and 49 licensed local editions in 81 countries.

Forbes is seeking a Lead Cybersecurity Engineer responsible for protecting Forbes' corporate technology environment and consumer-facing digital platforms through the design, implementation, and continuous improvement of cybersecurity controls, processes, and governance. This is a hands‑on technical leadership role reporting to the Vice President, Corporate Technology, with formal people‑management responsibility for a small distributed team of onshore employees and offshore contractors.

This individual will own cybersecurity across two complementary domains: corporate technology security, spanning identity and access management, endpoint protection, network and cloud security, email and phishing defense, and compliance; and web platform security, spanning cloud infrastructure, source code and pipeline security, vulnerability management, and client‑side protection for Forbes' digital properties. The role also serves as the governance lead for all cybersecurity matters across the organization, partnering closely with Infrastructure, Engineering, QA, Product, Legal, and Corporate Technology teams.

The ideal candidate is both a technical security expert and a business‑minded collaborator, capable of balancing security requirements with operational efficiency and business objectives.

This is a hybrid position based at Forbes' Jersey City headquarters, with an expectation of working in the office 2‑3 days per week. Candidates should reside in New Jersey, New York, or the greater New York City metropolitan area.

• Lead, mentor, and manage a distributed team of onshore employees and offshore contractors supporting corporate technology and web platform security.
• Manage direct reports, goal setting, performance reviews, professional development, and day‑to‑day prioritization of work.
• Oversee offshore contractor engagements, including deliverables, work quality, and coordination with vendor and resource management.
• Serve as the governance lead for all cybersecurity matters across the organization, setting direction, standards, and priorities.
• Develop and maintain company‑wide cybersecurity policies, standards, procedures, and technical documentation.
• Partner with Legal on vendor security preparation and review, including NDAs, data processing agreements (DPAs), and vendor risk assessments.
• Manage cybersecurity projects, operational requests, and remediation initiatives, ensuring timely execution and resolution.
• Support PCI and other compliance initiatives, audits, and security assessments, including evidence collection and questionnaire responses.
• Maintain security metrics, reporting, and operational dashboards to provide visibility into organizational risk.
• Monitor emerging cybersecurity threats and vulnerabilities, recommending improvements to strengthen Forbes' security posture.
• Serve as the organization's designated HIPAA Security Officer, ensuring compliance with the HIPAA Security Rule and overseeing the protection of electronic protected health information (ePHI).
• Administer and secure the enterprise identity and access management (SSO/MFA) platform, including authentication policies, identity lifecycle automation, and privileged access controls.
• Manage endpoint detection and response (EDR) and endpoint protection across the enterprise device fleet.
• Manage enterprise network security, including next‑generation firewalls, switching infrastructure, and cloud network environments.
• Secure the enterprise cloud identity and directory environment, including conditional access, session controls, and…