Manager – Cybersecurity & Risk

Job not on LinkedIn

🔥 0 minutes ago

Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of SavATree

SavATree

1001 - 5000 employees

Founded 1985

👥 B2C

🤝 B2B

🏛️ Government

B2C • B2B • Government

SavATree is a licensed and accredited tree, shrub and lawn care company that provides residential, commercial, and municipal landscape stewardship and maintenance. The company offers services including tree pruning, cabling and bracing, removal, stump grinding, fertilization, disease and pest treatments (including organic options), lawn care (aeration, seeding, fertilization), irrigation service, deer deterrent programs, tick and insect control, holiday lighting, emergency storm response, and professional consulting from ISA-certified arborists for risk assessments, appraisals, and urban-forest planning. SavATree emphasizes science-based diagnosis, environmental stewardship, and personalized service across local branches.

📋 Description

• Serve as the enterprise cybersecurity lead responsible for cybersecurity operations and risk management across infrastructure, endpoints, identity, cloud, applications, data, and third-party environments. • Partner closely with Infrastructure & Operations to strengthen endpoint security, vulnerability management, patching, identity and access management, logging, monitoring, and incident detection and response capabilities. • Provide technical cybersecurity leadership across Microsoft, cloud, SaaS, and enterprise platforms to improve overall security posture. • Partner with enterprise application teams to ensure secure architecture, integrations, and data practices across core business platforms, including Microsoft technologies and enterprise applications. • Lead cybersecurity incident response coordination, tabletop exercises, root cause analysis, and remediation planning. • Evaluate emerging threats and recommend pragmatic, risk-based mitigation strategies aligned to business priorities. • Monitor and assess cybersecurity posture across internal and third-party environments. • Help define and mature enterprise cybersecurity capabilities, operating processes, and governance appropriate for a growing organization. • Develop and maintain cybersecurity policies, standards, procedures, and best practices. • Build and maintain a practical cybersecurity roadmap focused on risk reduction, resiliency, and operational effectiveness. • Establish cybersecurity metrics, scorecards, and reporting for IT leadership and executive stakeholders. • Conduct risk assessments and partner with teams to prioritize remediation activities. • Support security awareness and training initiatives. • Support enterprise cybersecurity governance practices, including access controls, vendor risk management, data protection, and security awareness. • Partner with stakeholders on cybersecurity-related audits, customer questionnaires, cyber insurance requirements, and compliance activities. • Help mature incident response, disaster recovery, and business continuity capabilities. • Establish practical, scalable controls appropriate for a fast-paced, growth-oriented organization. • Drive accountability, service quality, and measurable outcomes across third-party providers. • Evaluate cybersecurity tools and recommend solutions aligned to business needs and organizational maturity. • Establish a strong cybersecurity operating foundation and improve organizational resiliency through pragmatic controls and risk reduction.

🎯 Requirements

• 7+ years of progressive cybersecurity experience with increasing responsibility. • Experience operating as a senior cybersecurity individual contributor or technical leader in a mid-sized enterprise environment. • Strong technical understanding across IAM, EDR, vulnerability management, SIEM, Microsoft Security, Azure security, infrastructure/network security, incident response, and security architecture. • Experience developing cybersecurity policies, standards, and procedures. • Experience managing third-party cybersecurity vendors and managed service providers. • Strong communication skills with the ability to explain technical risks in business-friendly language. • Experience in private equity-backed, multi-site, field-service, or distributed operations environments. • Experience supporting geographically dispersed or branch-based organizations. • Experience with Microsoft technologies including Azure, Microsoft 365, Defender, Intune, and Entra ID. • Relevant certifications such as CISSP, CISM, Security+, Azure Security Engineer, or similar.

Apply Now

Similar Jobs

🔥 23 minutes ago

Anduril Industries

501 - 1000

🚀 Aerospace

🤖 Artificial Intelligence

Senior Network Security Engineer focusing on architecting and implementing defensive controls for military technology advancements. Collaborating across teams to ensure secure network design and operations.

🔥 49 minutes ago

AFL

1001 - 5000

📡 Telecommunications

🔧 Hardware

⚡ Energy

Data Security Engineer at AFL focusing on implementation and operation of DSPM and DLP platforms. Collaborating with IT Security teams to build and enhance data security programs.

🔥 4 hours ago

Origami Risk

501 - 1000

⚕️ Healthcare Insurance

🏢 Enterprise

Offensive Product Security Engineer at Origami Risk identifying and mitigating security vulnerabilities through assessments and testing. Collaborating with teams to integrate security best practices into development lifecycle.

🔥 5 hours ago

Walker & Dunlop

1001 - 5000

💸 Finance

🏠 Real Estate

Security Engineer enhancing information security for Walker & Dunlop, a leading commercial real estate firm. Focused on optimizing and managing security technologies across diverse environments.

🔥 5 hours ago

CrowdStrike

5001 - 10000

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

Cloud Red Team Consultant at CrowdStrike conducting adversary emulation against cloud environments to enhance security posture. Collaborating with Blue Team for real-time threat detection and response.