Cybersecurity Manager

Welcome to a better way, an authentic way. Welcome to Nature’s Way.

We believe that nature is the best way to holistic health, and it should be available to everyone.

When we help people live healthy lives, we build a happier, healthier world for everyone.

How we go about our work drives TRUST in who we are, what we do, and the products we produce.

Our customers trust:

• Our products to be the gold standard
• Our words to be true
• Our claims to be honest,
• Our actions to have integrity.

And we’ve been leading the way since 1969.

Be a part of helping people live healthy lives as our new Cybersecurity Manager.

The Cybersecurity Manager leads the day-to-day execution and continual improvement of the enterprise Cyber Security program. This role manages security operations, vulnerability management, incident response, risk reduction, compliance and audit readiness, security awareness, third-party security services, and the operational use of Microsoft security capabilities. The manager works across IT, business teams, and service providers to implement security controls, coordinate remediation, improve detection and response workflows, and strengthen the organization’s security posture while supporting the broader security strategy established by the Director of Cyber Security and IT Operations.

This role is fully remote.

Include the following. Other duties may be assigned.

• Lead execution and continual improvement of the enterprise Cyber Security program, translating security strategy, policies, standards, and priorities into operational plans.
• Manage vulnerability management activities, including identification, prioritization, coordination of remediation, and reporting of technology risks.
• Lead day-to-day security operations and monitoring, including investigation, escalation, response, documentation, and follow-up for security events and incidents.
• Coordinate incident response activities across IT domains and business functions and support post-incident reviews and corrective actions.
• Maintain audit and assessment readiness by coordinating documentation, evidence collection, control validation, findings response, and remediation tracking.
• Support security risk assessments and third-party/vendor security reviews and coordinate mitigation of identified risks.
• Partner with IT, Legal, Operations, Compliance, and other business teams on cross-functional security initiatives and remediation activities.
• Promote security awareness and compliance through communication, education, and support of organization-wide security programs.
• Support the implementation of Operation’s security capabilities such as identity and access management, privileged access, endpoint protection, vulnerability management, and email/web security.
• Own the implementation and operation of security capabilities such as logging and monitoring, SIEM/SOAR, and data protection.
• Manage third-party security operations center (SOC) and other security service providers, including service levels, analyst performance, alert quality, portal access, escalation paths, incident coordination, actionable reporting, backup coverage, and continuous improvement.
• Lead the design, development, testing, governance, and continual improvement of security incident response and remediation tools, workflows, automation rules, playbooks, integrations, and reporting to improve detection, triage, containment, recovery, and corrective action while minimizing unintended operational impact.
• Oversee the operational configuration, integration, data quality, alerting, and policy alignment of Microsoft security capabilities, including Defender XDR, Defender for Endpoint, Defender for Cloud, Sentinel, Entra , Purview, and…