Sr. Manager, Enterprise Cybersecurity & Information Security

Job Summary

This role provides strategic and operational leadership for NTTA's enterprise cybersecurity, information security, cyber risk management, and regulatory compliance programs. This position is responsible for developing and executing a comprehensive cybersecurity strategy that protects organizational assets, critical infrastructure, customer information, and technology resources while enabling business objectives. The role serves as NTTA's senior cybersecurity leader, partnering with executive leadership, business stakeholders, and technology teams to manage cyber risk, ensure regulatory compliance, strengthen organizational resilience, and promote a culture of security awareness across the enterprise.

This role provides strategic and operational leadership for NTTA's enterprise cybersecurity, information security, cyber risk management, and regulatory compliance programs. This position is responsible for developing and executing a comprehensive cybersecurity strategy that protects organizational assets, critical infrastructure, customer information, and technology resources while enabling business objectives. The role serves as NTTA's senior cybersecurity leader, partnering with executive leadership, business stakeholders, and technology teams to manage cyber risk, ensure regulatory compliance, strengthen organizational resilience, and promote a culture of security awareness across the enterprise.

• Essential duties and functions, pursuant to the Americans with Disabilities Act, may include the following. Other related duties may be assigned.
• Develop, implement, and maintain NTTA's enterprise cybersecurity and information security strategy, roadmap, policies, standards, and governance framework aligned with organizational objectives while ensuring effective oversight, accountability, and alignment with business priorities and risk tolerance.
• Lead Cybersecurity Operations, threat detection, incident response, vulnerability management, and cyber resilience activities to protect critical business systems and infrastructure.
• Establish and maintain an enterprise cyber risk management program, including risk assessments, mitigation strategies, and reporting on cybersecurity risks and trends.
• Ensure compliance with applicable cybersecurity, privacy, and regulatory requirements, including PCI DSS, NIST Cybersecurity Framework, SOC controls, and other relevant standards.
• Lead cybersecurity awareness, education, and training initiatives to strengthen organizational security culture and reduce human risk factors.
• Develop and present cybersecurity metrics, risk assessments, program maturity updates, and incident reporting to senior leadership, executive and board.
• Direct third-party cybersecurity risk management activities, including security assessments, vendor reviews, contractual requirements, and ongoing monitoring of critical service providers.
• Partner with business and technology leaders to integrate security requirements into enterprise architecture, project delivery, cloud initiatives, data management, and operational processes.
• Lead and develop high-performing cybersecurity teams through recruitment, coaching, performance management, succession planning, and employee development while fostering a culture of innovation, accountability, collaboration, continuous improvement, and operational excellence.

Responsible for the full range of supervisory activities including selection, training, evaluation, coaching, employee development, performance management, and recommendation for corrective action or dismissal. Establishes departmental goals and objectives, manages resource allocation and budgets, and promotes a culture of accountability, innovation, collaboration, and continuous improvement

• Business Insight / Ensures Accountability:
  Knowledge of cybersecurity governance, regulatory compliance, privacy requirements, and industry frameworks, including NIST, PCI DSS, SOC, ISO 27001, CIS Controls, and applicable federal, state, and local regulations.
• Tech Savvy / Business Insight:
  Knowledge of enterprise cybersecurity operations, including security architecture, cloud security, identity and access management, threat intelligence, vulnerability management, incident response, and business continuity practices.
• Strategic Mindset / Drives Vision and
  
  Purpose:
  
  Ability to develop and execute enterprise cybersecurity…