Senior Cybersecurity Manager

The Senior Cybersecurity Manager owns the day-to-day operation, health, and continuous improvement of Concert Golf Partners’ (CGP) enterprise security platform stack across corporate offices and 40+ premier private golf clubs nationwide. This is a senior, hands-on platform and operations role for someone who has run enterprise security tooling at scale and can operate with limited oversight. The person in this seat keeps our endpoint, identity, email, monitoring, and vulnerability platforms running effectively, tuned, and reporting reliably — and brings the maturity to set operating standards, provide technical leadership, establish operational standards, and represent security operations to vendors, MSPs, and leadership.

Secondarily, the role supports oversight of CGP’s cybersecurity remediation program and helping produce operational reporting for leadership. Reporting to the VP of Information Technology, this position is based in the Lake Mary, Florida corporate office and is expected to work primarily on-site, with cross-departmental collaboration, vendor governance, and occasional travel to club locations. Some tasks may require work outside normal business hours, weekends, or holidays depending on operational or security needs.

• Target Base Salary: Starting at $120,000 with flexibility based on experience, qualifications, and demonstrated expertise, plus eligibility for performance-based incentive compensation.

• Endpoint & threat protection: Administer and tune the enterprise Endpoint Detection & Response (EDR) platform across all managed endpoints — policy management, detection triage, containment actions, and coordination with managed monitoring on escalations.
• Identity & access
  :
  Operate identity and access controls through Microsoft Entra  — conditional access, MFA/SSO enforcement, privileged access via the enterprise PAM platform, and access reviews aligned to least privilege.
• Email & collaboration security: Maintain the enterprise email security platform, including policy tuning, quarantine review, and authentication controls (DKIM/DMARC/SPF).
• Monitoring, logging & detection: Own the enterprise SIEM platform — log source health, detection tuning, alerting, and coverage across the Microsoft 365 and AWS (40+ accounts) environments; ensure AWS-native logging and detection (Cloud Trail, Guard Duty, Security Hub) remain enabled and healthy.
• Vulnerability management: Run the enterprise vulnerability management platform — scan scheduling and scope (internal, external, network devices), triage, remediation tracking, and recurring metrics reporting to leadership.
• Device & asset management: Maintain Microsoft Intune (MDM/BYOD posture, compliance policies) and the enterprise asset inventory platform; keep an accurate, current view of the endpoint and asset estate.
• Patch & configuration health: Monitor patch and configuration status across endpoints and infrastructure; identify EOL/at-risk assets and drive them toward remediation or compensating controls (segmentation, isolation) where replacement isn’t immediately feasible.
• Security awareness operations: Administer the security awareness platform — phishing campaigns, training assignments, and completion tracking.
• Dashboards & metrics: Build and maintain security dashboards and recurring reporting (vulnerability age, remediation status, high-risk findings, overdue items) for IT and executive visibility.

• Program tracking: Help maintain status, owners, dependencies, and timelines for the active cybersecurity remediation program; keep tracking artifacts current for review with leadership.
• Operational reporting: Prepare and maintain operational cybersecurity dashboards, remediation metrics, and status reporting for IT leadership to support enterprise cybersecurity operations and decision-making.
• Vendor & MSP coordination: Partner with the MSP and platform/software vendors on implementation, tuning, and issue resolution; help coordinate cross-vendor dependencies.
• Governance & documentation: Support the maintenance of security…