[Hiring] Cybersecurity Manager @Nature's Way

Role Description

The Cybersecurity Manager leads the day-to-day execution and continual improvement of the enterprise Cyber Security program. This role manages security operations, vulnerability management, incident response, risk reduction, compliance and audit readiness, security awareness, third-party security services, and the operational use of Microsoft security capabilities. The manager works across IT, business teams, and service providers to implement security controls, coordinate remediation, improve detection and response workflows, and strengthen the organization’s security posture while supporting the broader security strategy established by the Director of Cyber Security and IT Operations. This role is fully remote.

Essential Duties and Responsibilities

• Lead execution and continual improvement of the enterprise Cyber Security program, translating security strategy, policies, standards, and priorities into operational plans.
• Manage vulnerability management activities, including identification, prioritization, coordination of remediation, and reporting of technology risks.
• Lead day-to-day security operations and monitoring, including investigation, escalation, response, documentation, and follow-up for security events and incidents.
• Coordinate incident response activities across IT domains and business functions and support post-incident reviews and corrective actions.
• Maintain audit and assessment readiness by coordinating documentation, evidence collection, control validation, findings response, and remediation tracking.
• Support security risk assessments and third-party/vendor security reviews and coordinate mitigation of identified risks.
• Partner with IT, Legal, Operations, Compliance, and other business teams on cross-functional security initiatives and remediation activities.
• Promote security awareness and compliance through communication, education, and support of organization-wide security programs.
• Support the implementation of Operation’s security capabilities such as identity and access management, privileged access, endpoint protection, vulnerability management, and email/web security.
• Own the implementation and operation of security capabilities such as logging and monitoring, SIEM/SOAR, and data protection.
• Manage third-party security operations center (SOC) and other security service providers, including service levels, analyst performance, alert quality, portal access, escalation paths, incident coordination, actionable reporting, backup coverage, and continuous improvement.
• Lead the design, development, testing, governance, and continual improvement of security incident response and remediation tools, workflows, automation rules, playbooks, integrations, and reporting to improve detection, triage, containment, recovery, and corrective action while minimizing unintended operational impact.
• Oversee the operational configuration, integration, data quality, alerting, and policy alignment of Microsoft security capabilities, including Defender XDR, Defender for Endpoint, Defender for Cloud, Sentinel, Entra ID, Purview, and supporting data connectors.
• Establish and govern least-privilege administrative access, privileged identity management, separate administrative accounts, role elevation, and access review practices for security and technology platforms.
• Maintain and improve security policies, processes, procedures, standards, knowledge articles, incident records, and lessons learned to support consistent execution, audit readiness, and organizational knowledge.
• Help establish and maintain secure configuration, patching, hardening, and technical control standards across infrastructure, applications, endpoints, and cloud environments.
• Provide clear security metrics, risk information, recommendations, and status updates to IT leadership and relevant stakeholders.
• Evaluate emerging threats, technologies, and security practices and recommend practical improvements.
• Mentor and develop Cyber Security staff, provide technical and operational guidance, establish priorities, and foster accountability and continuous improvement.
• Must have excellent verbal and written communication skills and the ability to interact professionally with executives, managers, auditors, partners, and subject matter experts.
• Must be highly self-motivated, detail-oriented, collaborative, and able to operate effectively in a fast-paced environment.

Qualifications

• Progressive experience in cybersecurity, information security, or closely related IT roles, including experience leading security initiatives and providing guidance to other security professionals.
• Working knowledge of security frameworks and best practices such as NIST CSF, ISO/IEC 27001/27002, and CIS Controls.
• Experience with vulnerability management, security monitoring, incident response, identity and access management, endpoint security, logging/SIEM, data protection, secure configuration, and patch management.
• Experience supporting internal or external security audits, assessments, evidence collection, remediation, and compliance activities.
• Knowledge of enterprise infrastructure and cloud technologies, including Microsoft Azure and Microsoft 365 security environments, is highly desirable.
• Hands-on experience designing, maturing, implementing, administering, tuning, and integrating the Microsoft security suite, including Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft Sentinel, Microsoft Entra ID and Privileged Identity Management, Microsoft Purview, Microsoft Intune security controls, and related Microsoft 365 and Azure security capabilities.
• Experience designing and governing security automation, including Microsoft Sentinel automation rules and playbooks, Logic Apps, alert enrichment, notifications, data connectors, workflow integrations, and automated response actions.
• Experience managing third-party SOC or managed security service providers, including service-level oversight, escalation, quality review, access dependencies, performance reporting, and vendor coordination.
• Ability to assess technical risk, translate findings into practical remediation plans, and communicate risk to technical and non-technical stakeholders.
• Relevant security certifications such as CISSP, CISM, or Microsoft security certifications are preferred.
• Commitment to continuous professional development and staying current with emerging technologies, threats, and security practices.

Supervisory Responsibilities

• This position has supervisory responsibilities and is responsible for leading, mentoring, and developing Cyber Security staff.

Education and/or Experience

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field, or an equivalent combination of education, professional certifications, and relevant experience.
• Demonstrated experience in enterprise cybersecurity operations, risk management, incident response, and audit/compliance activities is required; prior leadership or supervisory experience is preferred.

Benefits

• Medical: Option to select either a PPO plan or one of 2 high-deductible medical plans that includes a company contribution to your personal health savings bank account.
• Dental: Delta Dental PPO & an option to select an enhanced dental plan.
• Vision: Routine preventative coverage under medical plan and an option to elect additional voluntary coverage.
• Time Off: All employees receive 11 holidays off per year, as well as paid time off that starts at a minimum of two weeks per year.
• 401K Plan: Company match of up to 4% as long as employees contribute a minimum of 6% to the account. An additional profit-sharing contribution is also made to employee accounts if the company meets its annual targets.
• Company provided short-term & long-term disability.
• Life and AD&D insurance.
• Flexible spending accounts.
• Voluntary critical illness & accident coverage.
• New parent phase-in program & paternity leave.
• Educational assistance reimbursement.
• Product discounts & a wellness program.