The Woodlands, TX Work arrangement: Hybrid We are recruiting a Senior Manager to lead cybersecurity operations and the organization's IT governance, risk, and compliance programs for a publicly traded company. This person will set security strategy, strengthen the company's risk posture, and work closely with IT leaders, business stakeholders, and internal and external auditors. What you'll do Develop and execute a multi-year cybersecurity and IT risk strategy aligned with business priorities. Lead security operations, including monitoring, threat detection, incident response, vulnerability management, and remediation. Establish and maintain security policies, standards, controls, and reporting using frameworks such as
NIST, ISO
27001, and COBIT. Oversee security architecture and tools, including SIEM, endpoint protection, cloud security, and identity and access management. Lead IT governance and compliance efforts, including risk assessments, audit preparation, control testing, and remediation tracking. Partner with business and technology teams to identify security risks in new projects and systems. Evaluate appropriate uses of AI and automation in security operations and compliance, with clear oversight and data protection controls. Manage security vendors and lead, mentor, and develop cybersecurity and governance professionals. Report security risks, incidents, and program progress to senior leadership. What we're looking for Bachelor's degree in cybersecurity, information technology, computer science, or a related field; master's degree preferred. At least 8 years of experience in cybersecurity, security governance, or IT risk management, including 4 years in a leadership or management role. Experience building or improving enterprise cybersecurity and GRC programs. Hands-on understanding of security operations, incident response, cloud and network security, SIEM, and identity and access management. Experience working with auditors and translating technical risks into clear business recommendations. Knowledge of
NIST, ISO
27001, COBIT, and applicable regulatory or public company controls. Strong communication skills and the ability to lead cross-functional initiatives.
Preferred certifications:
CISSP, CISM, CRISC, CGEIT, Microsoft SC-100, or a comparable credential.
Compensation:
Competitive base salary and bonus, commensurate with experience. If you have led both cybersecurity operations and IT risk or compliance programs, we'd welcome a conversation.
