Cybersecurity Manager

CYBERSECURITY MANAGER DEPARTMENT OF INNOVATION AND TECHNOLOGY CITY OF WORCESTER

The City of Worcester is seeking qualified applicants for a Cybersecurity Managerinthe Department of Innovation and Technology. Under the direction of the Chief Information Officer, this position is responsible for establishing the City of Worcester’s cybersecurity strategy, overseeing daily security operations, and ensuring the protection of information systems supporting employees across a hybrid environment that includes enterprise IT, cloud platforms, and public safety operational technologies.

This role requires both strategic oversight and direct, hands‑on engagement with the security team and broader organization to implement and sustain best‑practice processes, procedures, and supporting technologies.

The Cybersecurity Manager supervises the Cybersecurity Analyst and Cybersecurity Trainer. This position collaborates with City leadership, departmental stakeholders, and external partners to strengthen the City’s cybersecurity posture and maintain compliance with regulatory and policy requirements.

Bilingual applicants are encouraged to apply.

• Develop and maintain the City’s cybersecurity strategy in alignment with industry standards and municipal needs.
• Serve as the City’s primary cybersecurity advisor, providing risk-based guidance to DoIT leadership and City executives.
• Establish, update, and enforce cybersecurity policies, standards, and procedures.
• Oversee governance activities, including risk assessments, compliance initiatives, and long-term program planning.
• Conduct and direct cybersecurity risk assessments, threat evaluations, and gap analyses.
• Coordinate Incident Response, Business Continuity, and Disaster Recovery planning and exercises.
• Identify opportunities for security improvements and recommend risk mitigation strategies across applications, infrastructure, and public safety systems.
• Manage security platforms, including but not limited to email security, SIEM, EDR, Zero Trust SSE, firewalls, DLP.
• Supervise daily security operations and provide leadership to the Cybersecurity Analyst and Cybersecurity Trainer.
• Ensure the confidentiality, integrity, and availability of City data, systems, networks, and critical infrastructure.
• Lead security incident investigations and coordinate response efforts with IT, legal, public safety, and external partners.
• Oversee vulnerability assessments, penetration testing, and audit remediation.
• Maintain current knowledge of cybersecurity technologies, trends, and threats.
• Evaluate, recommend, and support procurement of cybersecurity tools and services.
• Direct integration, configuration, and optimization of cybersecurity technologies.
• Oversee the Citywide cybersecurity awareness and training program.
• Promote a culture of security, collaboration, and shared responsibility across departments.
• Other duties as assigned.

• Deep understanding of security principles, access control models, and risk management.
• Strong knowledge of IT infrastructure, cloud computing, hybrid environments, and enterprise systems.
• Ability to influence organizational change, build morale, and foster a strong security culture.
• Strong leadership, team management, mentoring, and staff development skills.
• Commitment to continuous improvement of processes, controls, and team efficiency.
• Excellent written and verbal communication skills, including translating complex topics for non‑technical audiences.
• Ability to prioritize and execute tasks in high‑pressure or time‑sensitive environments.
• Strong analytical, problem‑solving, and decision‑making abilities.
• Experience developing and maintaining security policies, standards, and procedures.
• Experience with business continuity, disaster recovery planning, incident response, and security investigations.
• Strong interpersonal communication, organizational, and customer‑service skills.
• Strong communication, collaboration, and cross‑department partnership skills
• Strong attention to detail and analytical abilities.
• Regular onsite attendance is required.

• Bachelor’s degree in cybersecurity, computer science,…