Senior Manager, Cyber Tech, Trust and Mitigation

Coke Florida is looking for a Technology Sr Manager Cyber Tech, Trust, & Mitigation based out of our Tampa HQ location.

The Senior Manager Cyber Technology, Trust, Mitigations ensures adherence to regulatory, contractual, and internal security requirements. They will provide strategic leadership, drive security maturity, and partner with executives, IT, and business stakeholders to align security initiatives with enterprise risk management. This role involves overseeing the development, implementation, and maintenance of enterprise-level cyber security software, integrating various systems, and driving continuous improvement in IT Infrastructure processes across the enterprise to include managing the SOC.This involves leading a team, partnering with various departments, and leveraging technology to enhance cyber security and compliance. This leader manages teams, budgets, and timelines for cyber security projects, ensuring alignment with business objectives and compliance with industry standards.In addition, this role will require not only strategic thinking but also the mindset that this is a business and should be managed, e.g. benchmarking, internal marketing etc. To this end, this role partners closely with business unit leadership, vendors, and executive stakeholders to enable business growth, ensure resiliency, and protect critical information assets.

Key Accountability Bullets:

Overall

• Design and execute adoption programs and leverage data-driven insights to cyber security and compliance.
• In partnership with IT leadership, establish KPIs and performance metrics, generate reports and dashboards for insights, and monitor market trends.

• Develop and implement disaster recovery in support of business continuity plans to ensure system availability during emergencies, conducting regular testing and updates of recovery.
• Drive continuous improvement in cyber security systems, processes and methodologies, leveraging technology to enhance efficiency and effectiveness.
• Analyze and streamline cyber security processes and implement best practices with the goals of improving security key measurable outcomes.
• Ensure that all technology solutions and processes comply with industry standards and regulatory requirements.
• Identify and evaluate emerging technologies and trends in cyber security technologies recommending and implementing innovative solutions.
• Generate reports and dashboards for insights, performance, and operations
• Experience leading in multi-business unit environments

Cybersecurity Operations & Incident Response

• Lead the cybersecurity operations function including monitoring, detection, investigation, and response.
• Direct enterprise-wide incident response , ensuring rapid containment, root cause analysis, and lessons learned.
• Oversee vulnerability management and remediation across business units.
• Partner with IT and business leaders to embed proactive risk mitigation into daily operations.

Governance, Risk & Compliance (GRC)

• Develop, maintain, and enforce enterprise security policies, standards, and procedures .
• Manage regulatory compliance programs (e.g., HIPAA, PCI, SOX, GDPR, NIST, ISO 27001) across diverse business units.
• Own the risk management framework , ensuring risk assessments, control testing, and remediation are performed consistently.
• Coordinate third-party risk management, vendor due diligence, and audit activities.

Leadership & Strategy

• Serve as the senior security leader across multiple business units , balancing global standards with local business needs.
• Build and lead a high-performing team of analysts, engineers, and compliance professionals.
• Provide executive-level reporting on cyber risk, incident trends, and compliance posture.
• Drive security awareness and training initiatives to strengthen organizational culture.
• Collaborate with infrastructure, applications, legal, and compliance teams to ensure holistic security coverage.

Program Development & Continuous Improvement

• Establish and monitor KPIs and SLAs for security operations and compliance effectiveness.
• Lead annual risk assessments, tabletop exercises, and business continuity testing.
• Implement security automation and orchestration to improve response efficiency.
• Benchmark against industry frameworks to guide maturity roadmap.

Financial & Vendor Management

• Own the cyber security budget, driving cost optimization and reinvestment into modernization initiatives .
• Negotiate and manage contracts for hardware, software, cloud services/SaaS, and third-party providers.
• Track and report on spend, savings, and ROI from infrastructure initiatives.

• Ensure high availability, disaster recovery, and business continuity across platforms.
• Establish and monitor SLAs, KPIs, and operational metrics to drive service quality and performance.
• Lead vendor and managed service provider relationships, ensuring cost-effective and high-quality service delivery.

People & Team Leadership

• Lead, mentor, and develop a team of cyber security and compliance specialists.
• Foster a culture of accountability, innovation, and continuous improvement.
• Partner with infrastructure and application teams to ensure secure, integrated IT services.

Key Goals/Metrics:

• SLAs for cyber security and meet compliance requirements
• Manage and meet budgetary goals
• Develop a roadmap and long-term vision/strategy for cyber security
• Drive automation into cyber security

Top 3 Competencies:

• Strategic thinkingto align cyber security and compliance across the business and with IT strategy
• Collaboration/relationship skills across business units/affiliates and IT

• Technical leadership and decision-making as well as team development

Skills & Other Requirements

Qualified candidates must possess:

• Education: Bachelor’s degree in Information Security, Computer Science, or related field (Master’s preferred) or equivalent experience
• Certifications (preferred): CISSP, CISM, CISA, CRISC, or equivalent.
• Experience:
  • 12+ years of cyber security experience, with at least 5+ years in management role leading cyber security and GRC.
  • Ability to transform this area to be run as a business and to successfully be able to influence peers and stakeholders alike to engage this role as partnership rather than as an “order taker.”
  • Proven experience managing cybersecurity operations, incident response, and GRC programs across large, complex organizations.
  • Strong knowledge of regulatory frameworks and security standards (NIST, ISO, SOC, HIPAA, PCI, SOX, GDPR, etc.).
  • Track record of building and maturing cross-business-unit security programs.
• Skills:
  • Executive presence with the ability to brief boards, regulators, and senior executives.
  • Strong leadership, coaching, and organizational skills.
  • Ability to balance strategic vision with hands-on execution.
• Additional Qualifications for success in this role:
  • Experience with AI and requirements for cyber security utilization of AI
  • Results Oriented - Self-motivated driving through obstacles to accomplish objectives with a bias for action resulting in a strong track record of delivering results
  • Strategic thinking and the ability to develop and implement strategic plans that align with business objectives and business cases.
  • Collaboration & Teamwork - Able to create effective working relationships with a strong sense of commitment to a course of action holding people accountable while maintaining positive working relationships
  • Prioritization - Ability to prioritize multiple objectives/goals based on opportunities and situations needed to deliver the business results, and can anticipate adjustments that may be needed to resolve issues and obstacles
  • Interpersonal skills - Able to successfully engage and work with all levels of the organization and external partners through effective communication, written and verbal skills
  • Experience in leading and managing change within an organization
  • Exhibit professional maturity - respecting other’s roles and opinions, keeping personal opinions at minimum about products and programs, speaking up at meetings with pertinent, relevant input, engaging and open body language, staying engaged during meetings