Cybersecurity Manager

IT Security Director

Under direction of the IT Security Director, the Cybersecurity Manager leads the firm's cybersecurity operations, providing technical leadership across security engineering, architecture, incident response, and security platforms. The position oversees cybersecurity personnel and external service providers, directs the implementation and effectiveness of security controls, and partners with IT and business stakeholders to integrate security into the firm's technology environment. The role is accountable for operational security performance, incident response readiness, and the delivery of cybersecurity initiatives that protect firm systems and data.

At Spencer Fane, we carefully consider a wide range of factors when determining compensation, including but not limited to location, skillset, experience, training, licenses, certifications and other business or organizational needs. Compensation will be determined based on the above factors along with the requirements of the position. The salary range for this position will vary depending on location as shown below.

Birmingham, AL;
Hendersonville, TN;
Kansas City, MO;
Las Vegas, NV;
Miami, FL;
Nashville, TN;
New Orleans, LA;
Overland Park, KS;
Palm Beach, Fl;
Phoenix, AZ;
Salt Lake City, UT;
St. Cloud, MN;
St. Louis-Clayton, MO;
Tampa, FL;
Tulsa, OK: $ - $

Austin, TX;
Chicago, IL;
Dallas, TX;
Denver, CO;
Galveston, TX;
Houston, TX;
Minneapolis, MN;
Plano, TX;
Sacramento, CA;
Westlake Village, CA: $ - $

Bentonville, AR;
Cape Girardeau, MO;
Dakota Dunes, SD;
Fayetteville, AR;
Greenville, SC;
Jefferson City, MO;
Oklahoma City, OK;
Omaha, NE;
Santa Fe, NM;
Springfield, MO;
St. George, UT;
Tallahassee, FL;
Wichita, KS: $ - $

Santa Monica, CA;
Washington, DC: $ - $

• Lead daily cybersecurity operations, workload prioritization, escalations, and service delivery.
• Supervise cybersecurity personnel, including assignments, coaching, cross-training, and performance management.
• Establish documented ownership, procedures, metrics, service expectations, and backup coverage.

• Lead technical investigation, containment, eradication, recovery, and post-incident improvement.
• Coordinate response activities with IT, Legal, Communications, firm leadership, and external providers.
• Maintain and test incident-response plans, playbooks, escalation paths, and tabletop exercises.

• Lead security reviews for network, endpoint, identity, cloud, data, AI, and business technologies.
• Translate business requirements and security risks into practical technical designs and standards.
• Validate access, integrations, logging, monitoring, segmentation, data protection, and recovery controls.

• Maintain operational accountability for network, endpoint, identity, email, cloud, and privileged-access controls.
• Ensure security platforms are properly configured, integrated, monitored, documented, and supported.
• Monitor platform health, security coverage, service performance, and remediation of control gaps.

• Lead cybersecurity initiatives from design through implementation, testing, transition, and measurement.
• Manage scope, milestones, dependencies, risks, rollback plans, and stakeholder communications.
• Build sustainable processes that reduce reliance on individuals, other IT teams, and external providers.

• Oversee vulnerability identification, validation, prioritization, remediation, exceptions, and reporting.
• Direct development and tuning of security detections, alerts, use cases, and response playbooks.
• Use incidents, testing, intelligence, and operational data to identify security improvements.

• Lead technical security assessments for AI platforms, agents, integrations, automation, and emerging technologies.
• Evaluate permissions, data access, third-party connections, production impact, logging, and monitoring.
• Translate governance requirements into practical technical safeguards and operating standards.

• Manage operational relationships with security monitoring, incident-response, testing, and engineering providers.
• Define responsibilities, service expectations, escalation procedures, deliverables, and performance measures.
• Validate vendor work while retaining…