Manager-Cyber Security

From the beginning our goal was to establish an advisory firm that stands apart from the rest one that is grounded in our Core Values and dedicated to creating a positive experience not just for our clients but for our people too. We firmly believe in the strength of collaboration enthusiasm generosity and perseverance as the driving forces behind our success. With advisory solutions spanning accounting and risk technology-enabled transformation and transactions we partner with our clients to solve todays challenges and deliver present and future value.

Our commitment to our people has earned us numerous awards including Inc5000s Fastest Growing Companies and Glassdoors Best Places to Work. Explore what our employees have to say about our unique culture by clicking here.

We are seeking a technically strong Cybersecurity Manager to join our high-performing Cybersecurity & Privacy practice. This is a hands-on role requiring deep expertise across cloud security architecture security engineering risk and compliance frameworks and threat modeling. The ideal candidate brings a strong technical foundation and the ability to design implement and assess security solutions across complex client environments. The position is hybrid (60% on-site/client 40% remote) with local travel

What Youll Do

Typical Engagements Include:

• Assess and mature IAM programs including identity governance privileged access SSO/MFA joiner-mover-leaver access reviews and least privilege across on-prem and cloud (Okta Microsoft Entra ID SailPoint CyberArk BeyondTrust)
• Design cloud security architectures for AWS Azure and GCP including identity federation segmentation encryption and logging (AWS IAM/KMS Azure Policy GCP IAM HashiCorp Vault)
• Implement controls for containers infrastructure-as-code and serverless with focus on workload identity secrets management and policy-as-code (Kubernetes Terraform CloudFormation Open Policy Agent Checkov)
• Design API security standards and secure integration patterns including OAuth 2.0/OIDC service-to-service authentication and gateway controls (Apigee Azure API Management AWS API Gateway)
• Conduct risk and maturity assessments using ISO 27001 NIST CSF 2.0 CIS 18 PCI-DSS NIST 800-53 CSA CCM and MITRE ATT&CK emphasizing identity and cloud controls
• Perform security tool gap analysis consolidation and implementation across vulnerability management endpoint SIEM IDS/IPS firewall and cloud platforms (Tenable Qualys CrowdStrike Splunk Microsoft Sentinel Palo Alto Networks Wiz Prisma Cloud)
• Lead security transformation programs covering architecture implementation and remediation with a zero trust identity-centric approach (Zscaler Netskope)
• Perform threat modeling and penetration testing advisory including identity-based attack paths and cloud misconfigurations (BloodHound Pacu Burp Suite)
• Apply MITRE ATT&CK to map adversary techniques and inform controls and detection coverage (ATT&CK Navigator Atomic Red Team)
• Drive capability uplift across IAM Vulnerability Management Incident Response IT DR Business Continuity Threat Intelligence and Security Monitoring (ServiceNow Recorded Future Mandiant)
• Assess IR readiness; design playbooks for identity compromise and cloud incidents and facilitate technical tabletop exercises (Cortex XSOAR Splunk SOAR Microsoft Defender XDR)
• Review and harden application and system DR plans identifying gaps and developing remediation playbooks (AWS Elastic Disaster Recovery Azure Site Recovery Veeam Zerto)
• Engineer controls for code scanning (SAST/DAST) and application and infrastructure monitoring including IAM policy analysis and identity threat detection (Snyk Checkmarx SonarQube Datadog Entra ID Protection)
• Implement and advise on PCI-DSS compliance and support CCPA/CPRA and GDPR privacy audits (OneTrust Drata Vanta)

Leadership Skills

• Serve as a proactive project leader and self-starter driving engagement timelines deliverables and client confidence forward without needing direction
• Manage multiple concurrent workstreams across assessment implementation and compliance activities keeping teams organized prioritized and on schedule across all threads
• Anticipate risks dependencies and roadblocks before they escalate bringing well-reasoned solutions to clients and internal stakeholders proactively
• Lead and coordinate cross-functional project teams across Senior Associates and other practice members delegating effectively to maintain quality accountability and momentum throughout the engagement lifecycle
• Own the full arc of engagement success from initial scoping and project planning through final delivery taking personal accountability for client satisfaction output quality and measurable outcomes

What Youll Bring

Education and Experience

• Bachelors degree required in Information Systems Computer Science Mathematics or a related technical field
• Minimum of 5 years of Big 4 or related consulting/professional services experience with hands-on Cybersecurity engineering and advisory expertise

Certifications

• CISSP Certified Information Systems Security Professional
• CCSP Certified Cloud Security Professional
• AWS Certified Security Specialty Microsoft SC-100/AZ-500 or equivalent cloud security certification
• CISM CEH OSCP or other relevant security certifications a plus

Technical Skills

• Cloud platforms: hands-on experience with AWS Azure and/or GCP security services and native security tooling
• Cloud-native security: containers (Docker Kubernetes) IaC (Terraform CloudFormation Bicep) serverless security and CI/CD pipeline security
• Network security: Firewalls (Palo Alto Fortinet Cisco) VPN IDS/IPS micro segmentation and zero-trust architecture
• Endpoint & identity security: EDR/XDR platforms PAM IAM MFA and SSO solutions
• Vulnerability management: Tenable Qualys Rapid7 or equivalent; familiarity with CVSS scoring and patch prioritization
• Application security: SAST/DAST tooling API security testing secure SDLC practices and code scanning platforms

#LI-JS1

#LI- Hybrid

Benefits Summary

The CrossCountry total rewards package includes comprehensive healthcare options including medical dental and vision coverage; flexible spending accounts; and a 401(k) with company matching. Additionally employees can take advantage of generous parental and maternity leave policies technology stipends and wellness reimbursement programs all designed to support both professional growth and personal well-being. For detailed information about benefits at CrossCountry please visit our dedicated benefits site: Employment Opportunity (EEO)

CrossCountry provides equal employment opportunities (EEO) to all employeesand applicants for employment and believes that respect and fair treatment are critical to creating a productive and inclusive workplace.

As an equal opportunity employer CrossCountry is fully committed to comply with all federal state and local laws and prohibits discrimination and harassment of any type without regard to race color religion age sex national origin disability pregnancy genetics sexual orientation veteran status gender identity or expression or any other protected characteristic. The company also complies with pay transparency and labor laws applicable to all terms and conditions of employment.

We may use artificial intelligence (AI) tools to support parts of the hiring process such as reviewing applications analyzing resumes or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed please contact us.

Required Experience:

Manager