Director Vulnerability Management Jobs in Riverside, CA

Cordoba is a leading engineering and program management firm based in California. We are seeking a Cybersecurity Manager. The Cybersecurity Manager manages the organization's cybersecurity program to protect information systems, technology assets, and sensitive data from evolving threats. This position oversees cybersecurity operations, risk management, incident response, compliance activities, security technologies, and user awareness initiatives. The role supervises cybersecurity personnel, collaborates with internal stakeholders, and assists the Director of Information Security, Systems, and Technology with procurement oversight, vendor management, and strategic initiatives. The Cybersecurity Manager evaluates emerging risks, implements effective security controls, and ensures alignment with regulatory requirements, industry best practices, and organizational objectives.

• Supervise the cybersecurity team, inclusive of, but not limited to, annual performance evaluation, daily supervision, retention and career planning, and timesheet and expense reimbursement oversight.
• Assist the Director of Information Security, Systems, and Technology in the supervision of the procurement team inclusive of, but not limited to, annual performance evaluation, daily supervision, retention and career planning, and timesheet and expense reimbursement oversight.
• Stay current on developments in cybersecurity, governance, cybersecurity frameworks, and any regulatory and contractual requirements.
• Evaluate the security risks associated with new tools and technologies that Cordoba and projects decide to use.
• Monitor and analyze network traffic and security logs to detect potential threats and vulnerabilities.
• Develop and implement strategies to protect the organization's information systems and information technology.
• Manage vulnerability assessments and penetration testing to identify weaknesses and vulnerabilities in the organization's systems and networks and manage the remediation process.
• Develop, maintain, and manage business continuity disaster recovery and incident response plans and procedures to effectively respond to cybersecurity incidents.
• Develop, deploy, and manage internal phishing campaigns and results. Track and enroll in cybersecurity awareness retraining and lead live webinars on best practices against phishing. Produce reports for management.
• Administer over cybersecurity technology stack. This includes, but is not limited to: endpoint protection platform, antivirus, email security (gateway, API-based, and cloud), unified endpoint management platform (mobile device management)
• Create reports and alerts in cybersecurity technology stack to include, but not limited to, endpoint protection platform, antivirus, email security (gateway, API-based, and cloud), unified endpoint management platform (mobile device management)
• Recommend changes or additions to the cybersecurity technology stack, assess vendors, negotiate contracts and lead the implementation of migration to new systems
• Collaborate with other teams to ensure that cybersecurity protocols are integrated into all aspects of the organization's operations.
• Stay current with the latest cybersecurity threats and trends and ensure that the organization's security measures are always current and effective.
• Provide training and education to staff on cybersecurity best practices.
• Administer identity access management (IAM) and identity provider (IdP) platform, including security groups, membership, and app integration through SAML and SWA.
• Provide helpdesk and technical support to internal and external clients/users, promptly troubleshooting computer hardware and software issues.
• Identify, escalation, and resolve complex or escalated technical issues, recommending improvements as needed.
• Document and track issues and resolutions to maintain accurate support records.
• Produce support documentation for supported products, to include, but not limited to identifying and documenting security controls, compliance, risk management, etc.
• Drive results and set priorities appropriately and independently with limited supervision and direction.
• Identify, evaluate, promote, and help implement customer support best practices.
• Assist the Director of Security, Information Systems, and Technology with vendor management and oversight.
• Effectively contribute to overall Information Security, Systems and Technology strategy.
• Meet financial requirements by submitting information for budgets; monitoring expenses.
• Implement and enforce information technology security policies and procedures.
• Manage security audits as required by information security policies and procedures.
• Recommend Cybersecurity policy and procedure additions, changes and updates as needed.
• Manage and coordinate projects, tasks and information exchange with end users, vendors and consultants as needed.
• Provide on-call and on-site IT and cybersecurity support.
• Provide support to the Director of Information Security, Systems and Technology as needed.
• Perform additional duties and assume additional responsibilities as identified by the Director of Information Security, Systems, and Technology for the efficient operation of Cordoba.
• Accomplish organization goals by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.

• Bachelor's degree in Computer Science, Information Technology, or related field required
• 5+ Years of IT help desk and/ or customer service experience required
• 5+ years of experience in technical support and Microsoft Windows operating system required
• 5+ years of experience with cybersecurity required
• Proven work experience as a Cybersecurity Analyst or related role required
• IT Certifications (A+, Microsoft, etc.) preferred
• Cybersecurity Certifications preferred
• Okta Administrator Certification preferred
• Strong understanding of cybersecurity principles, network and system architecture, and security protocols
• Technical knowledge regarding administration and reporting of cybersecurity technology stack, to include, but not limited to endpoint protection platform, antivirus, email security (gateway, API-based, and cloud), unified endpoint management platform (mobile device management)
• Experience in the implementation of migration to various cybersecurity systems
• Experience with vulnerability assessments and penetration testing tools and techniques
• Familiarity with regulatory compliance frameworks (e.g., NIST, ISO)
• Demonstrated ability to create, implement, and refine processes and procedures
• Excellent communication skills, ability to collaborate with other teams and stakeholders and communicate technical issues to non-technical staff
• Excellent project management and organizational skills with attention to detail
• Demonstrated ability to meet deadlines and work in a fast-paced high stress environment
• Ability to work independently and as a team member with good judgment and adaptability
• Positive, professional demeanor and exceptional customer service skills

Pay Range: $135,000 - $160,000 per year

Work Location: Hybrid 3-4 days per week in the Santa Ana, CA office

Travel: Occasional travel to other Southern CA office locations

Visa Sponsorship: Legal authorization to work in the U.S.A. on a full-time basis without sponsorship

Other Requirements: Ability to pass a pre-authorized background check

Our Company

Cordoba Corporation, Making a Difference

Cordoba Corporation is a nationally recognized civil engineering, construction management, program management, and planning firm. Our expertise spans diverse sectors, including education and facilities, transportation, water, and energy. Collaborating closely with our clients, we have successfully delivered complex and high-impact infrastructure projects across California.

National Recognition - Cordoba’s efforts have garnered national acclaim. Engineering News-Record (ENR) has consistently ranked us as a “top 100 construction management firm” and a “top 50 program management firm.” Additionally, ENR recognized Cordoba as a “top 100 design firm” in California in 2018. Our business model emphasizes efficiency, fostering a dynamic work environment. We approach projects with multifaceted strategies, ensuring successful outcomes.

Statewide Presence - With headquarters in Los Angeles, Cordoba maintains a strong statewide presence. Our offices extend to San Francisco, Sacramento, San Ramon, Chatsworth, Santa Ana, Ontario, and San Diego.

Enhancing Employee Well-Being

Benefits and Perks: We offer multiple medical and dental insurance plans, as well as vision insurance. Plans are subsidized for both employees and dependents with coverage effective the first month after hire. Additionally, Cordoba provides employees with paid AD&D and life insurance, a 401k with an industry leading employer match, generous vacation and sick leave accruals, 9 paid holidays, and other forms of paid time off. We also offer flexible spending accounts (FSA’s) including medical care reimbursement, dependent care reimbursement, and commuter benefit plans. Employees are also eligible for our employee assistance program and well-being benefits that include stress management, nutrition, and financial well-being.

Cordoba Corporation provides equal employment opportunities, promoting diversity and inclusion. We welcome applicants regardless of race, color, religion, sex, national origin, age, disability, or genetics.

Harassment-Free Workplace: We strictly prohibit workplace harassment based on any factor, including race, gender, sexual orientation, or disability. Cordoba is committed to fostering a healthy and happy lifestyle for our employees, both within and beyond the workplace.

For inquiries or accommodations, please contact our HR Department at: (213) 895-0224.

Join Cordoba Corporation and be part of shaping California’s future!

#LI-Hybrid