Cyber Security Manager

Job Description

Job Description

Cybersecurity Manager

Company Overview

A mission-driven organization based in the San Fernando Valley, California provides essential services and resources throughout the region. The organization supports a large, distributed workforce and maintains a highly regulated technology environment where information security, privacy, and operational resilience are critical. This is an opportunity to help shape and mature an enterprise cybersecurity program while making a meaningful impact within a community-focused organization.

Role Summary

The Cybersecurity Manager will lead the organization’s enterprise information security program while remaining actively involved in day-to-day security operations and engineering. This role will oversee cybersecurity strategy, Azure and Microsoft security, vulnerability management, incident response, identity and access management, compliance, and third-party security services. The ideal candidate is a hands-on cybersecurity leader who can balance strategic program development with technical execution while developing a growing team.

Key Responsibilities

• Develop and execute a multi-year cybersecurity strategy, roadmap, and program maturity plan aligned with organizational risk and business priorities.
• Lead security operations across cloud, identity, endpoint, email, data protection, vulnerability management, and network security.
• Strengthen security across Microsoft Azure and the broader Microsoft security ecosystem, including identity, endpoint, SIEM, device management, and data protection capabilities.
• Own vulnerability management processes, including identification, prioritization, remediation tracking, reporting, and continuous improvement.
• Develop and mature incident response processes, coordinate investigations, lead root-cause analysis, and oversee remediation activities.
• Establish and maintain security policies, standards, controls, risk assessments, and compliance documentation.
• Lead security governance and compliance initiatives within a HIPAA-regulated environment, including audit readiness and control effectiveness.
• Partner with IT and business stakeholders to embed security into system design, infrastructure standards, change management, and emerging technology initiatives.
• Manage security vendors, managed service providers, external assessments, penetration testing, and continuous monitoring relationships.
• Lead, mentor, and develop technical team members while establishing security KPIs, reporting, training, and awareness programs.

Additional Details

• Work model: On-site for the first 90 days, transitioning to a hybrid schedule with up to two remote days per week
• Leadership responsibility for systems and infrastructure professionals
• Approximately 60% hands-on technical work, 20% team leadership, and 20% vendor/service-provider management
• Opportunity to significantly influence cybersecurity strategy, tooling, processes, and long-term program maturity
• Current initiatives include privileged access management, incident response maturity, vulnerability management, email security, AI governance, and expanded use of enterprise security capabilities

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 7+ years of experience in cybersecurity, information security, risk management, security engineering, or related disciplines.
• 4+ years of leadership experience managing technical teams, security programs, or both.
• 5+ years of hands-on experience supporting security and compliance within HIPAA-regulated environments.
• Strong hands-on experience securing Microsoft Azure environments and working within a Microsoft-centric enterprise security ecosystem.
• Experience across security operations, vulnerability management, incident response, identity and access management, endpoint security, and network security.
• Demonstrated experience managing security vendors, managed service providers, and external security partners.
• Strong executive communication skills with the ability to translate technical vulnerabilities and cybersecurity risks into business impact.

Preferred Qualifications (Nice-to-Haves)

• Experience with Microsoft Sentinel, Entra ID, Intune, Defender, Purview/DLP, or comparable enterprise security technologies.
• Experience administering or securing Palo Alto or comparable enterprise firewall environments.
• Background improving privileged access management and identity security capabilities.
• Experience developing or maintaining an Information Security Management System and supporting ISO 27001 readiness.
• Familiarity with HITRUST and other healthcare security or privacy frameworks.
• Experience establishing governance and security policies for AI and emerging technologies.
• Experience supporting large, multi-site organizations with 1,000+ users.
• CISSP, CISM, CRISC, HCISPP, Microsoft Security/Azure, or comparable professional certifications.

Compensation & Benefits

• $160,000 - $165,000 with discretionary bonus
• Medical, dental, and vision benefits
• Employer-sponsored retirement benefits, including a defined-benefit pension program
• 403(b) and additional deferred compensation opportunities
• Three weeks of accrued vacation during the first year, plus sick time and paid holidays
• Life, disability, and additional employee wellness benefits
• Eligibility for qualifying public-service student loan forgiveness programs