About this role
Job Summary: The Cybersecurity Manager is a hands-on leadership role responsible for the day-to-day management, execution, and continuous improvement of the company's cybersecurity operations and engineering capabilities. This position leads cybersecurity personnel, managed security providers, consultants, and technical initiatives across security operations, incident response, vulnerability management, security engineering, identity security, cloud security, data security, and related programs. The role partners with IT, Infrastructure, Cloud Engineering, application teams, business stakeholders, and external providers to implement the cybersecurity roadmap, reduce risk, and maintain effective security controls across the enterprise.
The ideal candidate is a practical, technically credible leader who can balance team management, operational accountability, project delivery, and hands-on participation when needed. This role executes the cybersecurity strategy and governance program established by leadership, provides technical and operational direction to the cybersecurity team, and ensures initiatives and remediation activities are completed effectively. The successful candidate will remain technically engaged and contribute directly when needed while providing the daily leadership, prioritization, coaching, and operational accountability required to maintain operating capabilities and develop the team.
Essential Functions, Roles, and Responsibilities: Essential duties and responsibilities include the following:
• Practice safe work habits and comply with all quality, safety, health, environmental policies, procedures, programs, and regulations.
• Lead day-to-day cybersecurity operations, security engineering activities, incident response, vulnerability management, and technical risk remediation across the enterprise.
• Manage, develop, and establish priorities for cybersecurity personnel while coordinating the work of managed security providers, consultants, contractors, and other external resources.
• Oversee security monitoring, detection, investigation, escalation, containment, recovery, and post-incident improvement activities in coordination with internal teams and managed security partners.
• Lead the enterprise vulnerability management process, including risk-based prioritization, remediation coordination, exception tracking, validation, and operational reporting.
• Oversee the administration, implementation, integration, and continuous improvement of cybersecurity technologies and controls across endpoint, identity, cloud, network, email, application, and data environments.
• Drive execution of cybersecurity roadmap initiatives involving Zero Trust, identity security, cloud security, secure access technologies, security monitoring, data protection, and data governance capabilities.
• Partner with Infrastructure, Cloud Engineering, application teams, and business stakeholders to integrate approved security requirements into systems, projects, and operational processes.
• Execute cybersecurity governance activities established by leadership, including policy implementation, control validation, risk remediation tracking, audit support, evidence collection, and compliance coordination.
• Review and approve third-party security assessments prepared by external risk partners, coordinate remediation or exception decisions, and escalate material concerns to cybersecurity leadership.
• Manage cybersecurity vendor and service-provider relationships, monitor service performance, participate in product evaluations, and recommend technology or service improvements.
• Assist with cybersecurity budget planning, renewal analysis, licensing requirements, and investment recommendations while operating within approved financial authority and priorities.
• Assess operational metrics, control gaps, security findings, incidents, and emerging risks; establish corrective actions and communicate status, priorities, and recommendations to leadership and stakeholders.
• Maintain cybersecurity operating procedures, incident response playbooks, technical standards, service documentation, and team workflows necessary for consistent and auditable operations.
• Participate directly in technical investigations, engineering reviews, incident response, and high-priority remediation activities when additional expertise or leadership is required.
• Promote security awareness and accountability by providing practical guidance to technical teams, business stakeholders, and project owners.
Education, Training, Experience:
• Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or an equivalent combination of education and relevant experience.
• 8+ years of progressive experience in cybersecurity, security engineering, security operations, or a related technical discipline.
• 3+ years of experience leading cybersecurity personnel, technical teams, projects, vendors, managed security providers, or cybersecurity programs.
• Demonstrated experience managing security operations, incident response, vulnerability management, security engineering, and risk remediation activities in an enterprise environment.
• Experience supporting cloud, identity, endpoint, network, and data security initiatives within distributed or hybrid technology environments.
Certifications, Licenses, Registrations:
• ISC2 Certified Information Systems Security Professional (CISSP) or ISACA Certified Information Security Manager (CISM).
• Microsoft, cloud security, security operations, or other relevant technical certifications.
• Other relevant cybersecurity leadership, risk, or governance certifications.
Job Knowledge, Skills, Abilities:
• Strong technical and operational knowledge of security operations, incident response, vulnerability management, security engineering, and enterprise security technologies.
• Working knowledge of modern cybersecurity architectures and concepts, including Zero Trust, identity security, cloud security, Secure Access Service Edge (SASE), and layered security controls.
• Familiarity with data security capabilities and programs, including data classification, data loss prevention, data security posture management, data governance, and protection of sensitive information.
• Experience overseeing detection and response technologies, managed security services, vulnerability management platforms, cloud security controls, and other enterprise cybersecurity capabilities.
• Ability to assess technical and operational risk, prioritize remediation based on business impact, and hold stakeholders accountable for timely resolution.
• Experience coordinating cybersecurity incidents, investigations, containment, recovery, communications, and post-incident corrective actions.
• Working knowledge of cybersecurity governance, third-party risk, audit support, policy execution, control validation, and recognized frameworks such as NIST CSF and CIS Controls.
• Ability to evaluate technologies and services, manage vendor performance, develop recommendations, and support budget and renewal decisions.
• Strong people leadership, coaching, prioritization, project execution, documentation, analytical, and communication skills.
• Ability to operate effectively as a hands-on cybersecurity manager in a lean team, personally engaging in technical investigations, engineering reviews, incident response, and high-priority remediation when risk, complexity, or team capacity requires it, while remaining accountable for people leadership, prioritization, delegation, and delivery.
Supervisory Responsibilities: This role has supervisory responsibility for cybersecurity personnel and coordinates the work of managed security providers, consultants, contractors, and other external technical resources. Responsibilities include setting priorities, assigning work, coaching and developing team members, supporting performance management, and participating in recruiting and onboarding activities.
Disclaimer: This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this position. Duties, responsibilities, and activities may change at any time with or without notice.
Cactus Companies is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, veteran status, genetic information, or any other characteristic protected by law.
Safety is our top priority. All employees must comply with our comprehensive safety programs, participate in required safety training, and demonstrate commitment to our safety-first culture. This position may require working in potentially hazardous environments if you are traveling to a branch or plant location. Ensure that you follow all safety guidelines that are required when working in the field, branch or manufacturing facility.
This position generally operates in a professional office environment. The role routinely uses standard office equipment such as computers, phones, photocopiers, and filing cabinets. While performing the duties of this job, the employee is regularly required to:
• Sit for extended periods at a desk and work on a computer
• Use hands to finger, handle, or feel objects, tools, or controls
• Reach with hands and arms
• Talk and hear
• Occasionally lift and/or move up to 25 pounds
• Walk or stand periodically throughout the day
• Maintain sustained concentration on computer screens
• Work under deadlines with frequent interruptions
The noise level in the work environment is usually moderate. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Cactus Companies maintains a drug-free workplace and participates in E-Verify.