Cybersecurity Manager

The Cybersecurity Manager leads the organization’s cybersecurity, risk, and compliance program, ensuring the protection of enterprise systems and sensitive data in a regulated energy environment. This role oversees GRC, HIPAA compliance, third-party risk management, and security operations while partnering closely with IT, OT, and business stakeholders.

Key Responsibilities

• Lead cybersecurity governance, risk, and compliance (GRC) programs aligned to NIST/ISO frameworks.
• Ensure compliance with HIPAA and applicable regulatory requirements; manage audits and remediation.
• Own the third-party risk management program, including vendor assessments and ongoing monitoring.
• Oversee security operations, vulnerability management, and incident response activities.
• Report cybersecurity risks and metrics to leadership and drive continuous improvement.

Qualifications

• 7+ years of cybersecurity or information security experience; 3+ years in a leadership role.
• Strong experience with GRC, HIPAA, and vendor/third-party risk management.
• Knowledge of NIST CSF, ISO 27001, or similar frameworks.
• Energy or critical infrastructure experience preferred; CISSP/CISM/CRISC a plus.

Compensation: $140,000-160,000

Salary is based on a range of factors that include relevant experience, knowledge, skills, other job-related qualifications.