Sr IT Cyber Security Manager

Sr. IT Cyber Security Manager

Location: The Woodlands, TX
Work arrangement: Hybrid

We are recruiting a Senior Manager to lead cybersecurity operations and the organization’s IT governance, risk, and compliance programs for a publicly traded company. This person will set security strategy, strengthen the company’s risk posture, and work closely with IT leaders, business stakeholders, and internal and external auditors.

• Develop and execute a multi-year cybersecurity and IT risk strategy aligned with business priorities.

• Lead security operations, including monitoring, threat detection, incident response, vulnerability management, and remediation.

• Establish and maintain security policies, standards, controls, and reporting using frameworks such as NIST, ISO 27001, and COBIT.

• Oversee security architecture and tools, including SIEM, endpoint protection, cloud security, and identity and access management.

• Lead IT governance and compliance efforts, including risk assessments, audit preparation, control testing, and remediation tracking.

• Partner with business and technology teams to identify security risks in new projects and systems.

• Evaluate appropriate uses of AI and automation in security operations and compliance, with clear oversight and data protection controls.

• Manage security vendors and lead, mentor, and develop cybersecurity and governance professionals.

• Report security risks, incidents, and program progress to senior leadership.

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field; master’s degree preferred.

• At least 8 years of experience in cybersecurity, security governance, or IT risk management, including 4 years in a leadership or management role.

• Experience building or improving enterprise cybersecurity and GRC programs.

• Hands‑on understanding of security operations, incident response, cloud and network security, SIEM, and identity and access management.

• Experience working with auditors and translating technical risks into clear business recommendations.

• Knowledge of NIST, ISO 27001, COBIT, and applicable regulatory or public company controls.

• Strong communication skills and the ability to lead cross‑functional initiatives.

Preferred certifications: CISSP, CISM, CRISC, CGEIT, Microsoft SC-100, or a comparable credential.

Compensation: Competitive base salary and bonus, commensurate with experience.

If you have led both cybersecurity operations and IT risk or compliance programs, we’d welcome a conversation.