Cybersecurity Manager

IS Cybersecurity Manager Estimate Start Date: November 1, 2026 End Date: October 31, 2027 # of Hours Per Week - 40 Work Location/Type: Remote with Quarterly on-site Narrative Description of Position: The Cybersecurity Manager leads daily security operations, overseeing Security Operations Center (SOC) monitoring, threat detection, and incident response while maintaining current procedures and response plans. The role develops and updates cybersecurity standards, manages risk and vulnerability programs, supports audits and compliance, reviews vendor and access security, and directs security awareness efforts. They also provide regular reporting and strategic guidance to the CISO on program status, roadmap, and resource needs. Specifications of Position: Consultant will provide SOC Manager and Cybersecurity Manager services to the Metropolitan Council (the "Council "). Consultant will work under the direction of the Council's Chief Information Security Officer (CISO) or their designee. The Council keeps final decision-making authority over policy, budget, risk acceptance, and personnel matters. Duties and Responsibilities Consultant shall: SOC Operations: Manage daily Security Operations Center (SOC) operations and monitoring. Coordinate the work of Council security staff and keep SOC procedures and playbooks current. Threat Detection: Oversee monitoring across SIEM, EDR, network, email, identity, and cloud tools. Tune detections and perform threat hunting. Incident Response: Lead incident response under the Council's Cyber Incident Response Plan. Deliver incident reports and root cause analyses. Governance and Policy: Develop and update cybersecurity standards aligned with [NIST CSF / CIS Controls], and submit them for Council approval as needed. Risk and Vulnerability Management: Conduct risk assessments and help maintain the risk register. Manage vulnerability scanning, penetration testing coordination, and tracking of remediation. Recommend risk treatment to the CISO. Compliance and Audit: Assess whether controls meet applicable requirements. Support audits and track findings through to closure. Vendor and Access Oversight: Perform security reviews of vendors. Oversee access reviews, privileged access, and multi-factor authentication (MFA). Security Awareness: Manage security awareness training and phishing simulations. Reporting and Advisory: Report security metrics and program status to the CISO. Advise on the security roadmap, budget, and staffing needs. Performance Expectations Consultant shall: Triage incidents within Service Levels. Notify the CISO of Critical or High incidents. Track vulnerabilities through remediation, or through formal risk acceptance by the Council. Complete policy reviews and risk assessments. Deliver reports and deliverables on the agreed schedule. Handle all Council data according to the Minnesota Government Data Practices Act (Minn. Stat. Ch. 13) and Council security and data handling policies. Give incident response priority over program activities during active security incidents. Specifications - Descriptions of Specifications MINIMUM SPECIFICATION REQUIREMENTS: Must have to be accepted for consideration for this position. Level of Education - B.S. or B.A. Degree Years of experience - Five + years of experience in a Cyber Security Certification(s) - CMMC Certificate Cyber Compliance experience - Experience with compliance audits against CJIS, FTI, HIPAA and PCI Experience in Governance and Policy - Experience creating and updating cybersecurity policies and standards aligned with NIST CSF / CIS Controls DESIRED SPECIFICATIONS: Not required, but desire experience in these specifications for this position. Communications Requirements - Experience in the development of end user documentation. Work Environment - Working independently and/or in a team environment may be required for some engagements. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. E-talentnetwork