Manager, Cyber Security

Job Description: Location: 100% remote, must live in Central or Eastern Region Salary Range: $150,000 - $165,000 Company Overview Performing over 80 million locates annually, USIC is the most trusted name in underground utility damage prevention. USIC also provides a full suite of utility services throughout North America. Our Mission: to deliver quality, efficient, safe, and innovative solutions to protect our partners’ infrastructure and critical assets. Our Culture is known as Living the SAFE-LIFE: Protecting Infrastructure, Protecting Our Communities, Protecting Ourselves. Summary The Cybersecurity Manager is a senior role responsible for leading, maturing, and hands-on execution of the organization’s information security program. Operating across a large enterprise environment of 2,500–10,000 employees in a hybrid cloud/on-premise landscape, this individual will serve as both a strategic program leader and a working technical practitioner. With one direct report, the Cybersecurity Manager must be capable of operating independently, driving security initiatives end-to-end, and building a scalable security function aligned to industry best practices including NIST CSF, CIS Controls, and ISO 27001. Responsibilities Own and mature the organization’s information security program and policy framework Lead risk assessments and maintain the enterprise risk register with remediation tracking Develop and enforce security policies, standards, and procedures aligned to NIST CSF and CIS Controls Report security posture, risk trends, and program metrics to senior leadership and stakeholders Manage internal and external audit engagements related to cybersecurity Oversee day-to-day security monitoring across SIEM, EDR, and network detection tooling Define detection and alerting strategies; tune rules to reduce false positives Review and triage escalated alerts; serve as a hands-on analyst when needed Maintain and improve SOC playbooks, runbooks, and escalation procedures Serve as the Incident Response lead for all cybersecurity events and breaches Develop, maintain, and exercise the Incident Response Plan (IRP) and associated playbooks Coordinate cross-functional response with IT, Legal, HR, and Executive leadership Conduct post-incident reviews and drive remediation of identified gaps Oversee security architecture reviews for on-premise and cloud environments (AWS, Azure, or GCP) Ensure security-by-design principles are applied to infrastructure changes and new deployments Manage vulnerability management program including scanning, prioritization, and remediation tracking Partner with IT and DevOps teams to embed security controls into the SDLC and cloud pipelines Govern IAM strategy including role-based access control (RBAC), least privilege, and access reviews Oversee MFA, SSO, and privileged access management (PAM) implementations Conduct and manage periodic user access certifications across enterprise systems Partner with HR and IT on joiner/mover/leaver lifecycle processes Manage and mentor one direct report (Cybersecurity Analyst / Engineer) Define team priorities, manage workload distribution, and conduct performance reviews Build and maintain a multi-year cybersecurity roadmap aligned to organizational risk appetite Manage security tool stack, vendor relationships, and departmental budget Requirements 7+ years of experience in cybersecurity, with at least 2 years in a lead or management capacity Demonstrated hands-on experience across two or more security domains (GRC, SOC, IR, Cloud Security, IAM, TPRM) Proficiency with SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar) Experience with vulnerability management tools (e.g., Tenable, Qualys, Rapid7) Working knowledge of cloud security in AWS, Azure, or GCP hybrid environments Strong understanding of security frameworks: NIST CSF, CIS Controls, ISO 27001 Proven ability to lead incident response engagements end-to-end Excellent written and verbal communication skills; ability to present to executive stakeholders CISSP, CISM, CISA, or equivalent industry certification, preferred Experience building or significantly maturing a security program Familiarity with GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust) Experience with PAM tooling (e.g., CyberArk, BeyondTrust) Background in a large enterprise environment (2,500+ employees) We are an Equal Opportunity Employer. Veterans are encouraged to apply. PROTECTING & MAINTAINING INFRASTRUCTURE Performing over 80 million locates annually, USIC is the most trusted name in underground utility damage prevention. USIC also provides a full suite of utility services throughout the United States and Canada. Our mission: to deliver quality, efficient, safe, and innovative solutions to protect our partner’s infrastructure and critical assets.