Cybersecurity Program Manager

Building a career at Granite may be the most valuable thing you could do... Find your dream job today, and be part of something great. Our most powerful partnership is the one we have with our employees. Our people are our most valued asset and the foundation of Granite’s century-old success. We’re building more than infrastructure; we are building your future. General Summary This position leads the company’s cybersecurity program, overseeing security operations and reporting while identifying and addressing risks across the organization. The role prioritizes and drives initiatives to reduce or eliminate cybersecurity threats. Essential Job Accountabilities Lead the Information Technology (IT) organization in developing a comprehensive cybersecurity risk profile across the enterprise to ensure the company’s IT infrastructure is secure and resilient Oversee cybersecurity controls and risk management practices across cloud platforms, including Microsoft 365, Azure, SaaS applications, identity systems, and hybrid environments, to protect critical systems and data Implement selected cybersecurity frameworks and publish standards to drive consistent practices and ensure enterprise-wide compliance Align the cybersecurity program with regulatory and industry requirements (e.g., FARS/DFARS, NIST CSF & 800-171, CMMC, FedRAMP, CCPA) to maintain compliance and reduce legal and operational risk Partner with IT Delivery and Infrastructure teams to develop and enforce best practices and procedures that strengthen cybersecurity controls and reduce vulnerabilities Prioritize cybersecurity initiatives in collaboration with IT Delivery and Infrastructure teams to ensure timely mitigation of identified risks Develop and manage the incident response plan for cyber events to enable effective, coordinated, and timely responses to security incidents Develop and report metrics, KPIs, and KRIs to IT Steering, executive leadership, and the Board of Directors to demonstrate program effectiveness and secure ongoing support Develop and communicate the cybersecurity roadmap across the enterprise to build awareness, alignment, and sponsorship for key initiatives Lead cybersecurity awareness and training programs to ensure employees understand and can recognize and respond to cyber threats Manage the security operations function to monitor, detect, and respond to vulnerabilities and cyber threats, ensuring timely mitigation and protection of company assets Develop and maintain a third-party cybersecurity risk management program to evaluate and validate vendor security practices and ensure partners meet company standards Manage the cybersecurity budget by allocating resources effectively and advocating for investments needed to address emerging threats and support program priorities Education Bachelor’s degree in Computer Science, Information Systems, or a related field required Professional certification in cybersecurity or information security, such as CISSP or CISM Work Experience 10+ years of progressive cybersecurity management experience 15+ years of hands-on cybersecurity experience Knowledge, Skills, and Abilities Demonstrated expertise in managing cybersecurity and security operations functions Advanced knowledge of the cybersecurity threat landscape, including emerging threats, attack vectors, and mitigation strategies Advanced knowledge of IT systems, tools, and infrastructure, with the ability to stay current on new and evolving technologies In-depth knowledge of cybersecurity solutions and services in the market, including evaluation and selection of vendor offerings Proficiency in cybersecurity frameworks (e.g., NIST, ISO 27001), including implementation and compliance alignment Experience developing and executing cybersecurity roadmaps and budget forecasts, with measurable alignment to business objectives Strong persuasive reasoning and influencing skills, with the ability to drive decision-making across stakeholders Customer-focused mindset, with the ability to deliver responsive, solutions-oriented service to internal and external stakeholders Advanced verbal and written communication skills, including the ability to clearly and concisely present complex technical information to non-technical audiences Ability to operate effectively in dynamic, evolving environments, including influencing and motivating without direct authority Strong analytical and problem-solving skills, with the ability to assess risks and implement effective solutions Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk and hear. The employee frequently is required to stand, walk, sit and use hands to operate a computer keyboard. The employee is occasionally required to reach with hands and arms. The employee must occasionally lift and/or move up to 20 pounds. Specific vision abilities required by this job include close vision, and ability to adjust focus. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Additional Requirements/Skills Valid driver's license and ability to drive, with flexibility to travel as required Comply, understand, and support company safety initiatives to ensure a safe work environment Ability and willingness to abide by company code of conduct daily Our Benefits at a Glance: Building tomorrow starts with you, and Granite knows that you can excel only if we support you in and out of the workplace. That is why we offer a broad benefits package that includes paid holidays, sick leave, medical, dental, vision, life insurance, disability insurance, flexible spending plans, as well as special programs for musculoskeletal health, mental wellness, and more. Salaried employees may choose from two PPO medical plans through Anthem BlueCross, including our most popular plan, for which 100% of the premium is paid by Granite for eligible employees and dependents. Employees can also opt into a Health Savings Account (HSA) or a Flexible Spending Account (FSA). As part of our investment in your future outside of the workplace, Granite provides a 100% match on the first 6% of eligible compensation that salaried employees defer into their 401(k) plans, which vests immediately. Benefits may vary for positions located outside of the continental United States. Base Salary Range: $168,947.00 - $253,420.00 Pay may vary based upon relevant experience, skills, location, and education among other factors. About Granite Construction Incorporated Granite Construction Incorporated is a member of the S&P 400 Index and is the parent company of Granite Construction Company, one of the nation's largest heavy civil contractors and construction materials producers. Granite is a Drug-Free Workplace and Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, protected veteran status, or any other protected characteristic. We consider qualified applicants with arrest and conviction records in accordance with the San Francisco Fair Chance Ordinance, the Los Angeles Fair Chance Initiative for Hiring Ordinance, and other applicable laws. For additional information on applicant/employee rights please click here. Notice to Staffing Agencies Granite Construction, Inc. and its subsidiaries ("Granite") will not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to Granite, including unsolicited resumes sent to a Granite mailing address, fax machine or email address, directly to Granite employees, or to Granite's resume database will be considered Granite property. Granite will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume. Granite will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. Agencies must obtain advance written approval from Granite's recruiting function to submit resumes, and then only in conjunction with a valid fully-executed contract for service and in response to a specific job opening. Granite will not pay a fee to any Agency that does not have such agreement in place. Agency agreements will only be valid if in writing and signed by Granite's Human Resources Representative or his/ her designee. No other Granite employee is authorized to bind Granite to any agreement regarding the placement of candidates by Agencies. Since 1922, Granite Construction has continued its long-standing commitment to building some of America’s largest infrastructure projects including highways, bridges, dams, rail, and power. Recognized as one of the top 25 largest construction companies in the U.S., Granite specializes in complex infrastructure projects and provides award-winning construction services in mining, earthwork, water/sewer, power, tunneling, rail, highway, and bridge construction. Granite also produces construction materials, gravel, ready-mix, recycled asphalt products, and asphalt concrete, and is a proven leader in alternative procurement project delivery. At Granite, our employees are our most valued asset and we are passionate about retaining, developing, and recruiting the best talent available. Our employees reflect our core values: Safety, Integrity, Excellence, Inclusion, and Sustainability and we are continuously looking for individuals who possess a winning attitude and share our Core Values. In exchange, we help you build a career that no other company can duplicate. You will be part of a learning culture, where teamwork and collaboration are encouraged, excellence is rewarded, and diversity is respected and valued. Add our award-winning safety program, ethics, reputation, and commitment to continuous improvement and you’ll see that we are building more than infrastructure—together, we are building your future.