Assistant Cybersecurity Policy Jobs in Arizona (NOW HIRING)

ABOUT THE JOB:

The Senior Manager, Cybersecurity is a hands-on leader responsible for the day-to-day execution and oversight of the organization's cybersecurity program. This role combines direct technical contribution with the management and development of a small cybersecurity team, ensuring the confidentiality, integrity, and availability of the organization's information systems and data.

WHAT YOU'LL BE DOING:

Team Leadership and Execution:
   Lead and develop a team of two cybersecurity professionals, providing coaching, prioritization, and performance management.
   Serve as a working manager - actively participating in technical execution alongside the team, not solely in an oversight capacity.
   Support the VP in shaping the cybersecurity strategy and translate it into actionable plans, priorities, and day-to-day activities.
Governance, Risk, and Compliance (GRC):
   Own the day-to-day GRC function, including cybersecurity policies, standards, procedures, and control frameworks.
   Maintain the cybersecurity risk register; identify, assess, and track risks and remediation activities.
   Support compliance with applicable regulations and frameworks (e.g., SOX, PCI, CMMC, NIST CSF).
   Coordinate internal and external audits, evidence collection, and control testing.
   Monitor regulatory and threat landscape changes and recommend policy updates.
   Manage third-party and vendor cybersecurity risk assessments.
   Perform software security reviews and drive remediation efforts. 
Incident Response and Investigation:
   Maintain the incident response plan and lead hands-on response to cybersecurity incidents.
   Coordinate with internal teams, vendors, and external stakeholders during investigations.
   Perform root cause analysis and drive corrective actions.
Security Operations and Architecture:
   Participate directly in threat detection, monitoring, vulnerability management, and remediation activities.
   Support secure design of systems, networks, and cloud environments in partnership with infrastructure and application teams.
   Ensure security controls are consistently applied across the environment.
Security Awareness and Training:
   Manage the cybersecurity awareness and training program, including phishing simulations and end-user education.
   Promote a culture of security awareness across the organization.
Cybersecurity Tools and Services:
   Manage cybersecurity tools, platforms, and third-party service providers (e.g., MSSP, SIEM, EDR).
   Evaluate and recommend new technologies to strengthen the organization's security posture.
Reporting and Communication:
   Provide regular updates to the VP and other stakeholders on cybersecurity posture, key risks, and initiative status.
   Communicate technical concepts clearly to both technical and non-technical audiences.
Budget Support:
   Assist in developing and managing the cybersecurity budget, identifying cost-effective solutions and prioritizing spend against the highest risks.

EDUCATION AND QUALIFICATIONS:

Required Education and Experience: 
   Bachelor's degree required in Computer Science, Information Systems, or other technical discipline (or equivalent experience).
   Relevant certifications (e.g., CISSP, CISM, CISA, GIAC) preferred.
   8+ years of technical experience in cybersecurity or a combination of cybersecurity and closely related technical fields.
   5+ years of hands-on experience performing threat detection and response.
   7+ years of people management or team lead experience.

Required Skills and Abilities: 
   Demonstrated ability to operate as a working manager - balancing direct technical contribution with team leadership.
   Experience with GRC activities, including policy management, risk assessment, and audit support.

Supervisory Responsibility:
Will manage a team of two Cyber Security Engineers.    

Work Environment: 
This is an in office role; not hybrid.

Travel Requirements: 
0-10%

Physical Requirements:
The employee must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Eyesight and Auditory Skills must be sufficient to meet safety expectations of the position.  The employee must be able to verbally communicate with employees, co-workers, and customers in person and by phone. The employee must also be able to travel to various work environments.