IT Governance & Cybersecurity Manager (Real Estate Investment Firm)

IT Governance & Cybersecurity Manager with the Southeast's TOP Real Estate Investment Firm - On-site - Raleigh, NC

This Jobot Job is hosted by: Craig Rosecrans
Are you a fit? Easy Apply now by clicking the "Apply Now" button and sending us your resume.
Salary: $100,000 - $135,000 per year

A bit about us:

We are seeking an experienced IT Governance & Cybersecurity Manager to take ownership of our organization's technology strategy, cybersecurity risk management, and external IT service provider relationships.

Our organization operates in a fast-paced, growth-oriented real estate investment environment where technology plays an increasingly important role in operational efficiency, data security, and business continuity.

Rather than maintaining a large internal IT department, we leverage external Managed Service Providers (MSPs) to support our infrastructure, systems, and day-to-day technology needs. We are looking for an internal technology leader who can provide the strategic oversight, accountability, and business judgment necessary to ensure these partnerships are delivering value while protecting the organization from evolving cybersecurity threats.

This is an opportunity for someone who enjoys taking ownership, working directly with executive leadership, and building a technology governance framework that can scale alongside a growing business.

Why join us?

• Competitive Base Salary
• Company paid health plan for employees
• Very generous PTO
• Dental and Vision, FSA, HSA
• Small team, autonomy
• Many more great perks!

Job Details

Key Responsibilities

IT Strategy & Technology Governance

Own and develop the organization's overall IT strategy, ensuring technology investments align with business objectives, operational needs, and long-term growth.

Establish and maintain IT governance policies, standards, procedures, and accountability across the organization.

Develop and manage a technology roadmap that addresses infrastructure, security, system reliability, and future business requirements.

Serve as the primary internal technology advisor to executive leadership, translating technical risks, opportunities, and recommendations into practical business decisions.

Evaluate existing technology systems, identify gaps and inefficiencies, and recommend improvements.

Establish measurable IT performance indicators and regularly report on technology spending, security posture, vendor performance, and strategic initiatives.

Cybersecurity & Risk Management

Own the organization's cybersecurity risk management program, including identifying, assessing, prioritizing, and monitoring technology-related risks.

Work closely with external IT and cybersecurity providers to ensure appropriate security controls, monitoring, and protective measures are implemented.

Oversee cybersecurity policies and practices related to access management, identity protection, endpoint security, data protection, and cloud environments.

Coordinate periodic cybersecurity risk assessments, vulnerability assessments, and third-party security reviews.

Develop and maintain incident response, disaster recovery, and business continuity plans in collaboration with external providers.

Evaluate cybersecurity insurance requirements, security-related vendor obligations, and applicable regulatory considerations.

Ensure security risks are appropriately documented, communicated to leadership, and addressed through defined remediation plans.

Establish employee cybersecurity awareness and training initiatives.

Managed Service Provider (MSP) & Vendor Management

Serve as the primary point of accountability for all outsourced IT service providers, cybersecurity partners, and technology vendors.

Manage MSP relationships, including contracts, service-level agreements, performance expectations, and escalation procedures.

Regularly assess vendor performance, responsiveness, service quality, and alignment with business needs.

Review MSP recommendations, proposed infrastructure changes, security solutions, and technology purchases to ensure they are technically appropriate and financially justified.

Identify opportunities to consolidate vendors, renegotiate contracts, improve service delivery, and reduce unnecessary technology spending.

Ensure external providers maintain appropriate documentation, security practices, and operational continuity.

IT Budgeting & Cost Optimization

Develop, manage, and monitor the organization's annual IT budget.

Analyze technology expenditures, including software licensing, cloud services, managed services, cybersecurity tools, and infrastructure.

Identify redundant systems, unnecessary subscriptions, and opportunities for cost savings.

Evaluate the financial impact and return on investment of proposed technology initiatives.

Partner with Finance and executive leadership on technology forecasting, vendor negotiations, and capital expenditure planning.

Establish reporting that provides leadership with visibility into technology costs, risks, and performance.

Technology Operations & Business Support

Provide oversight of the organization's technology environment, including cloud platforms, business applications, networking, endpoints, and identity management.

Ensure MSPs are effectively supporting employees and resolving technology issues within established service expectations.

Coordinate technology needs associated with company growth, office expansions, acquisitions, and organizational changes.

Partner with internal stakeholders to evaluate new software platforms, integrations, and business technology requirements.

Support internal automation initiatives by ensuring proposed solutions meet the organization's security, infrastructure, and governance standards.

Maintain oversight of critical system documentation, vendor access, technology assets, and software licensing.

Required Qualifications

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related discipline, or equivalent professional experience.

7+ years of progressive experience in IT operations, infrastructure management, IT governance, cybersecurity, or related technology functions.

Experience managing external IT service providers, MSPs, technology vendors, or outsourced infrastructure environments.

Demonstrated experience developing or contributing significantly to organizational IT strategy and technology planning.

Strong understanding of cybersecurity risk management, security controls, vulnerability management, and incident response.

Experience overseeing technology budgets, software licensing, vendor contracts, and IT-related expenditures.

Working knowledge of cloud-based business environments, identity and access management, endpoint protection, networking, and infrastructure security.

Ability to independently evaluate technical recommendations and challenge external providers when necessary.

Strong communication skills with the ability to present technology risks, costs, and recommendations to nontechnical executive leadership.

Comfortable working in a lean organization where the position requires both strategic thinking and hands-on coordination.

Preferred Qualifications

Experience in real estate investment, private equity, financial services, property management, or another data-sensitive business environment.

Familiarity with cybersecurity frameworks such as NIST Cybersecurity Framework, CIS Controls, or ISO 27001.

Experience with Microsoft 365, Microsoft Entra ID, Azure, Intune, or similar enterprise technology environments.

Experience with cybersecurity insurance assessments, third-party risk reviews, and vendor security evaluations.

Relevant certifications such as CISSP, CISM, CRISC, CISA, Security+, or ITIL.

Experience supporting organizations through periods of rapid growth, acquisitions, or operational expansion.

Familiarity with evaluating the security and governance implications of AI-enabled business applications and automation platforms.

What Success Looks Like

First 90 Days: Establish a clear understanding of the existing technology environment, MSP relationships, security controls, contracts, and IT spending. Identify immediate cybersecurity risks, service gaps, and opportunities for improvement.

First 6 Months: Implement a structured vendor management process, establish regular cybersecurity risk reporting, improve visibility into IT spending, and present a prioritized technology roadmap to executive leadership.

First 12 Months: Establish a sustainable IT governance framework, improve accountability across external providers, reduce unnecessary technology expenses, and ensure the organization has a clear cybersecurity and technology strategy supporting continued growth.

Interested in hearing more? Easy Apply now by clicking the "Apply Now" button.

Jobot is an Equal Opportunity Employer. We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot's policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions.

Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance.

Information collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal.

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Jobot, and/or its agents and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here: jobot.com/privacy-policy