Cybersecurity Manager

Salary: $150,000 - 160,000 per year Requirements:

• Bachelors degree in cybersecurity, information technology, computer science, information systems, engineering, or a related discipline, or equivalent experience; at least 7 years of progressively responsible cybersecurity or related technical experience, including 2 or more years in technical leadership or people management.
• Hands-on experience implementing, operating, troubleshooting, and improving enterprise security technologies and controls, including network security, firewalls, segmentation, VPNs, endpoint security, identity and access management, MFA, privileged access, logging, monitoring, and cloud security.
• Demonstrated experience in incident investigation and response, vulnerability and exposure management, security assessments, control validation, and remediation.
• Working knowledge of cybersecurity frameworks such as the NIST Cybersecurity Framework and experience supporting PCI DSS or other audited or regulated environments, including audits, assessments, evidence gathering, and remediation.
• Ability to develop a technical cybersecurity team while staying engaged in complex engineering work and investigations; effective collaboration with technology teams, business stakeholders, managed security providers, vendors, auditors, and external assessors.
• Strong analytical, troubleshooting, documentation, planning, communication, and organizational abilities, including sound risk-based prioritization and composure during significant security incidents.
• Preferred: Experience with NIST CSF assessments, cybersecurity maturity programs, and PCI DSS technical controls.
• Preferred: Familiarity with Microsoft Entra, Microsoft 365, Azure, hybrid and cloud environments, SIEM/XDR, endpoint protection, vulnerability management, application control, privileged access, email security, and network-security technologies.
• Preferred: Experience with Stellar Cyber, Qualys, ThreatLocker, BeyondTrust, Carbon Black, Microsoft Defender, Mimecast, Fortinet, or comparable platforms.
• Preferred: Experience with Zero Trust, SASE/ZTNA, network segmentation, and modern identity architectures.
• Preferred: Background in grocery, wholesale distribution, logistics, retail, or other high-availability operational environments.
• Preferred: Certifications such as CISSP, CISM, CRISC, GIAC, Security+, CySA+, or equivalent credentials.
• Core strengths include hands-on technical leadership, risk-based decision-making, operational discipline and continuous improvement, and clear communication across technical and business groups.

• Lead and continually improve day-to-day cybersecurity operations, technologies, controls, processes, and engineering activities.
• Manage and develop the Security Engineering team by setting ownership, priorities, standards, and measurable expectations, while contributing directly to implementation, configuration, troubleshooting, engineering, and complex investigations.
• Provide technical direction across endpoint and application security, network security, vulnerability management, identity and privileged access, email security, logging, monitoring, and related systems; ensure solutions are integrated, maintained, monitored, and improved.
• Partner with architecture and infrastructure teams to embed security across network, systems, cloud, identity, and enterprise architecture; assess emerging technologies for risk reduction, fit, integration, and supportability.
• Establish and maintain cybersecurity standards, procedures, architecture diagrams, technical documentation, and operational runbooks.
• Oversee internal security operations and coordinate with managed security and detection-and-response partners; lead Tier 2/3 escalations through investigation, containment, remediation, and recovery.
• Improve threat detection by ensuring useful security telemetry is collected and applied across endpoint, identity, network, cloud, email, infrastructure, and critical systems; direct major incident response with IT teams, external partners, and business stakeholders.
• Maintain and enhance incident-response plans, playbooks, escalation processes, and technical capabilities; lead tabletop exercises and track resulting improvements to completion.
• Conduct post-incident reviews, document lessons learned, measure detection and response performance and control effectiveness, and turn findings into improvements to controls, processes, architecture, and training.
• Establish risk-based vulnerability and exposure processes to identify, prioritize, remediate, and validate issues, weighing severity, exploitability, exposure, business criticality, sensitive data, and compensating controls.
• Coordinate vulnerability remediation with infrastructure, application, endpoint, and system owners; track aging, service-level targets, exceptions, compensating controls, and accepted risk, and report meaningful risk-reduction measures to leadership.
• Coordinate penetration tests and vulnerability assessments, oversee remediation, and validate findings.
• Advance governance and control maturity initiatives, including adoption and continued development of the NIST Cybersecurity Framework and other applicable requirements.
• Support PCI DSS, regulatory and contractual compliance, audits, cybersecurity assessments, and third-party reviews; maintain policies, standards, procedures, evidence, control documentation, and technical validation.
• Identify and track risks and control gaps, work with technical and business owners on practical remediation plans, monitor findings and exceptions, and assess third-party security controls and documentation as needed.

• AI
• Architect
• Azure
• Cloud
• Support
• Microsoft 365
• Network
• Security
• Office 365

More:

We are URM Stores, Inc., a Spokane, Washington-based cooperative that has supported independent grocers across the Inland Northwest since 1921 through purchasing, warehousing, and delivery. Our Member-Owners are shareholders, and we return earnings to cooperative members as patronage dividends. We employ more than 3,000 people, including colleagues at Rosauers Supermarkets and Peirone Produce. This hands-on leadership role works closely with our Infrastructure & Cybersecurity Architect, infrastructure engineering, Applications, Data/Integration/AI, Member Services, business stakeholders, and external security partners to strengthen a growing cybersecurity program. We offer a supportive team culture and a salary range of $150,000–$160,000, depending on experience and other relevant factors. Benefits include employee-paid medical, dental, vision, and prescription premiums covered in full by URM, more than 93% dependent premium coverage, a 401(k) match of up to 9% of annual salary, life and disability insurance options, vacation and paid holidays, sick leave, a paid volunteer day, company events, corporate discounts, and grocery-store employee discounts. We are an equal opportunity employer committed to an inclusive, discrimination-free workplace.

last updated 41 week of 2026