Project Cyber Security Jobs Near Me

Position Summary

The Cyber Security Lead is responsible for developing, implementing, and maintaining the organization's cybersecurity strategy, policies, and security controls. This role provides technical leadership and operational oversight for all cybersecurity initiatives, ensuring the confidentiality, integrity, and availability of company systems, networks, applications, and data.

The Cyber Security Lead partners with business leaders, IT teams, vendors, and stakeholders to identify risks, improve security posture, maintain compliance requirements, and respond to cybersecurity threats. This individual serves as the primary security subject matter expert and drives continuous improvement of the organization's security program.

Essential Duties and Responsibilities:

Security Operations

• Lead the day-to-day cybersecurity operations of the organization.
• Monitor and respond to security alerts, incidents, and threats.
• Oversee security tools including SIEM, endpoint protection, vulnerability management, email security, and identity management platforms.
• Coordinate incident response activities, investigations, containment, remediation, and post-incident reviews.
• Develop and maintain cybersecurity monitoring and alerting processes.

Risk Management

• Conduct cybersecurity risk assessments and recommend mitigation strategies.
• Identify vulnerabilities and oversee remediation efforts.
• Develop and maintain risk registers and security improvement roadmaps.
• Evaluate security risks associated with new technologies, vendors, and business initiatives.

Governance, Compliance, and Policy Management

• Develop, maintain, and enforce cybersecurity policies, standards, and procedures.
• Ensure compliance with applicable regulatory, contractual, and industry requirements.
• Support internal and external audits.
• Maintain cybersecurity documentation, evidence, and reporting requirements.
• Collaborate with legal, HR, and business stakeholders on security-related matters.

Security Architecture and Engineering

• Provide security guidance for infrastructure, cloud, network, and application projects.
• Review and approve security designs and configurations.
• Recommend and implement security best practices across Microsoft 365, Azure, Windows Server, VMware, networking, and enterprise applications.
• Support secure deployment and configuration standards.

Identity and Access Management

• Oversee identity governance and access control processes.
• Review privileged access management practices.
• Ensure appropriate user provisioning, deprovisioning, and access reviews are conducted.
• Support implementation of Zero Trust security principles.

Security Awareness and Training

• Develop and manage cybersecurity awareness programs.
• Conduct phishing simulations and user education initiatives.
• Promote a security-focused culture throughout the organization.
• Provide security guidance and training to IT staff and business users.

Vendor and Third-Party Security

• Assess cybersecurity controls of vendors and service providers.
• Participate in vendor selection and contract review processes.
• Monitor third-party risks and ensure security requirements are met.

Leadership and Reporting

• Serve as the primary cybersecurity advisor to IT leadership and business stakeholders.
• Develop security metrics, dashboards, and executive reporting.
• Lead cybersecurity projects and initiatives.
• Mentor IT personnel on cybersecurity best practices.
• Manage relationships with external security vendors, consultants, and auditors.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field; equivalent experience may be considered.
• 5+ years of cybersecurity experience.
• 3+ years of experience in security operations, risk management, or security engineering.
• Strong understanding of cybersecurity frameworks such as NIST CSF, CIS Controls, and ISO 27001.
• Experience managing cybersecurity incidents and investigations.
• Experience with vulnerability management and remediation programs.
• Knowledge of networking, operating systems, cloud platforms, and enterprise security technologies.

Preferred Qualifications

• Experience in manufacturing, distribution, or supply chain environments.
• Experience securing Microsoft 365 and Azure environments.
• Experience with Security Operations Center (SOC) processes.
• Experience with compliance frameworks and audit programs.
• Experience with cloud security and hybrid infrastructure environments.

Technical Skills

• Microsoft 365 Security and Compliance
• Microsoft Defender Suite
• Microsoft Entra ID (Azure AD)
• Vulnerability Management Platforms
• Endpoint Detection and Response (EDR)
• Security Information and Event Management (SIEM)
• Windows Server Administration
• Network Security Technologies
• Email Security Platforms
• Data Loss Prevention (DLP)
• Identity and Access Management (IAM)
• Cloud Security Technologies

Physical Requirements

• Ability to work in an office and data center environment.
• Ability to occasionally lift and move equipment up to 25 pounds.
• Ability to respond to cybersecurity incidents outside normal business hours when necessary.