Cybersecurity Manager

Summary: At Cold Spring Harbor Laboratory we are looking for a Cybersecurity Manager to lead our IT protective services, ensuring that our groundbreaking research remains secure, accessible, and resilient against modern threats. In this role, you will be the primary steward of our digital environment, balancing technical expertise with strategic oversight to support a world‑class scientific community. Position Responsibilities Cybersecurity Operations Management Access Management Business Continuity Governance and Risk Management Position Requirements Education Bachelor’s degree in Computer Science, Information Security, or a related field. (Masters Preferred) Certifications GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), CISA: Certified Information Security Auditor, CEH: Certified Ethical Hacker, CISM: Certified Information Security Manager, or CompTIA Security+. Experience Minimum of 6 years of professional IT experience, working hands on in a complex, enterprise‑level technology infrastructure. Minimum 4 years in a cybersecurity leadership role. Experience working in a research institution with scientific researchers and/or academic faculty preferred. Experience in data protection and cybersecurity, including incident management, security incident response frameworks, and disaster recovery planning. Proficiency in security technologies and tools, including SIEM, firewalls, VPNs, data encryption protocols, and anti‑malware solutions. Experience in cloud security and working with cloud platforms like AWS, Azure, or Google Cloud. Strong understanding of GDPR, CCPA, HIPAA, or similar data privacy regulations. Hands‑on experience with vulnerability assessments, penetration testing, and ethical hacking. Extensive knowledge of regional and global cybersecurity frameworks, such as NIST, ISO 27001, SOC 2, and CIS Controls. Skills Strong leadership and team management skills, with experience leading cybersecurity initiatives. Solid analytical and problem‑solving skills, with the ability to identify and mitigate data security risks. Excellent communication skills (oral and written) with the ability to be accurate, precise, and, whenever possible, succinct in messaging about complex problems to be solved and/or work to be completed. Ability to work cross‑functionally with IT, legal, and business stakeholders. Experience in the following platforms, systems, applications and network hardware including: Rapid7, Mimecast, ESET, ThreatLocker, DUO, Windows Server, Active Directory, Exchange, MS365, Fortinet, Linux/CentOS, TCP/IP, firewall and systems security, signal detection and review, business continuity, and disaster recovery. Experience with regulatory compliance related to cybersecurity and data privacy laws. Knowledge of threat intelligence platforms and advanced persistent threats (APT). Familiarity with Zero Trust Architecture and its implementation. Expertise in threat modelling, risk management, and securing controlled‑access data. Compensation and Benefits Our employees are compensated in many ways for their contributions to our mission, including competitive pay, exceptional health benefits, retirement plans, time off, and a range of recognition and wellness programs. Visit our CSHL Benefits sites to learn more. The salary range for this role is $155,000-$173,400 annually. The salary range and/or hourly rate listed is a good faith determination of potential base compensation that may be offered to a successful applicant for this position at the time of this job advertisement and may be modified in the future. When determining a base salary and/or rate, several factors may be considered as applicable (e.g., years of relevant experience, education, credentials, and internal equity). Equal Opportunity Employer Statement CSHL is an EO Employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status. VEVRAA Federal Contractor #J-18808-Ljbffr