cybersecurity manager

Stellar Hunters

<div>We are seeking a strategic and technically adept Cybersecurity Manager to lead our security program and protect the confidentiality, integrity, and availability of company systems and data. The ideal candidate will design, implement, and operate security controls, lead incident response and threat hunting activities, and partner with engineering, IT, legal, and business stakeholders to embed security into product and operational lifecycles. This role requires strong technical cybersecurity expertise, proven leadership of security initiatives, and the ability to communicate risk and mitigation strategies to leadership and cross-functional teams.<h3 class="jobSectionHeader">
Key Responsibilities for Cybersecurity Manager - Program, Operations &amp; Incident Response</h3><ul><li>
Lead the development, implementation, and continuous improvement of the enterprise cybersecurity program, including policies, standards, and operational procedures aligned with industry best practices and regulatory requirements.</li><li>
Manage day-to-day security operations, including monitoring, detection, vulnerability management, patching coordination, endpoint protection, and security tooling to ensure timely identification and remediation of threats.</li><li>
Own incident response planning and execution: develop and maintain incident response playbooks, lead investigations, coordinate containment and remediation activities, and drive post-incident root cause analysis and lessons learned.</li><li>
Perform threat modeling, threat hunting, and security assessments (including architecture reviews, penetration testing coordination, and application security reviews) to proactively reduce risk across cloud and on-premises environments.</li><li>
Partner with engineering, DevOps, product, and IT teams to integrate security into software development lifecycle (DevSecOps), cloud deployments, and infrastructure changes while enabling secure and efficient delivery.</li><li>
Manage third-party security risk through vendor assessments, contractual security requirements, and ongoing monitoring of critical suppliers.</li><li>
Develop and maintain security metrics, dashboards, and executive reporting to communicate security posture, trends, and risk appetite to leadership and stakeholders.</li><li>
Maintain and enhance security controls to support compliance with applicable frameworks and regulations (e.g., NIST, ISO 27001, SOC 2, GDPR); coordinate external audits and attestations as needed.</li><li>
Coach, mentor, and grow a high-performing security team; provide training and security awareness programs for employees across the organization to foster a security-conscious culture.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Cybersecurity Manager Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent experience.</li><li>
5+ years of progressive experience in cybersecurity roles, including hands-on experience with security operations, incident response, vulnerability management, and security engineering.</li><li>
Proven ability to lead incident response activities and manage security incidents end-to-end in production environments.</li><li>
Strong technical knowledge of network, host, application, and cloud security controls and architectures (e.g., IAM, WAF, SIEM, EDR, CASB, cloud-native security services).</li><li>
Experience with cloud platforms (AWS, Azure, GCP) and securing cloud-native workloads, infrastructure-as-code, and containerized environments.</li><li>
Familiarity with security standards and frameworks (e.g., NIST CSF, CIS, ISO 27001, SOC 2) and practical experience implementing controls to meet audit requirements.</li><li>
Strong analytical and problem-solving skills, attention to detail, and a data-driven approach to measuring and improving security posture.</li><li>
Excellent verbal and written communication skills; able to translate technical security concepts for non-technical stakeholders and prepare clear documentation and executive briefings.</li><li>
Ability to manage multiple priorities, lead cross-functional initiatives, and drive projects to completion in a fast-paced environment.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications - Certifications &amp; Tools</h4><ul><li>
Relevant certifications such as CISSP, CISM, GIAC, CCSP, or equivalent are preferred.</li><li>
Experience with security orchestration and automation (SOAR), SIEM platforms (e.g., Splunk, Sentinel), EDR/XDR tools, and cloud security posture management (CSPM) solutions.</li><li>
Prior experience in a public company, highly regulated industry, or at-scale consumer-facing technology environment is a plus.</li></ul><h5 class="jobSectionHeader">
Work Environment &amp; Compensation - Cybersecurity Manager Salary &amp; Benefits</h5><ul><li>
Full-time position with an onsite work model.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, paid time off, and professional development support.</li><li>
Opportunities for continuous learning, conference attendance, and certification assistance to support career growth.</li><li>
Collaborative and inclusive team environment committed to diversity, equity, and inclusion.</li></ul></div>

Cybersecurity Manager

AMLAK Holding

AMLAK is seeking an IT and Cybersecurity Manager to lead and continuously improve our technology environment across the business. This role is accountable for the stability, security, scalability, and performance of AMLAK&rsquo;s IT landscape&mdash;while driving practical digital enablement, cost optimization, and risk reduction.You will lead a lean internal IT team and take end-to-end ownership of infrastructure, enterprise systems, cybersecurity, vendor management, and IT project delivery, working closely with the CFO and senior stakeholders.Key responsibilitiesIT strategy and governance<ul><li>Define and execute AMLAK&rsquo;s IT roadmap aligned with corporate and financial objectives.</li><li>Establish and enforce IT policies, standards, procedures, and governance.</li><li>Ensure strong controls for data integrity, cybersecurity, and system availability to meet audit and compliance requirements.</li><li>Act as the primary technology advisor to the CFO and senior management.</li></ul>IT infrastructure and operations<ul><li>Own IT operations including networks, servers, cloud platforms, cybersecurity tools, end-user computing, and business applications.</li><li>Ensure high availability, monitoring, incident management, root-cause analysis, and continuous service improvement.</li><li>Maintain robust backup, disaster recovery, and business continuity capabilities.</li></ul>Enterprise systems and project delivery<ul><li>Lead IT initiatives including upgrades, ERP/enterprise systems, digital tools, integrations, and automation.</li><li>Translate business requirements into practical technical solutions and clear delivery plans.</li><li>Manage scope, timelines, budgets, risks, and stakeholder communication&mdash;ensuring measurable business outcomes.</li></ul>Vendor and contract management<ul><li>Manage the full vendor lifecycle (selection, onboarding, performance, renewals, and exits).</li><li>Negotiate SLAs, licensing, and support agreements to ensure service quality and cost effectiveness.</li><li>Proactively manage vendor risks, dependencies, and service continuity.</li></ul>Budgeting and cost optimization<ul><li>Prepare and manage IT OPEX/CAPEX budgets.</li><li>Track performance and spending and, identify optimization opportunities.</li></ul>Team leadership and stakeholder management<ul><li>Lead and develop a lean IT team across infrastructure, security, support, and operations.</li><li>Build a service-oriented, accountable culture with strong documentation and continuous improvement.</li><li>Communicate technical topics clearly to non-technical stakeholders.</li></ul>Job Types: Full-time, PermanentPay: QAR20,000.00 - QAR30,000.00 per monthExperience:<ul><li>IT &amp; Cybersecurity: 10 years (Required)</li></ul>Location:<ul><li>Doha (Required)</li></ul>

IT & Cybersecurity Manager

Archdiocese of Boston

<div>This is a full-time position that requires being at the Pastoral Center in Braintree several days a week. 
 
SUMMARY: The Cybersecurity Program Manager is principally responsible for the ITD security posture including technologies, policies, training, improvements, administration, oversight, etc. The position will require leadership in broad strategic planning activities, outreach, training and support, as well as hands-on technical tasks. This position requires working closely with ITD staff and vendors, as well as directly with employees both at the Pastoral Center and at remote office locations, including parishes. 
 
This position reports to the CIO. 
 
ESSENTIAL DUTIES AND RESPONSIBILITIES: 
Leadership:<ul><li>
Develop and implement a broad and comprehensive security posture built on known standards, e.g., NIST Framework, CIS Controls, Zero Trust. As appropriate, communicate new standards and protocols to senior staff and others.</li><li>
Develop, document, and audit best practices in support of network, systems, services, and information security.</li><li>
Enhance existing information security policies. Develop new policies including at the intersection of information security and Artificial Intelligence (AI).</li><li>
Lead the parish cyber initiative, working closely with all stakeholders.</li><li>
Develop a comprehensive parish cyber training program.</li><li>
Establish and facilitate regular cyber training workshops.</li><li>
Oversee the regular third-party penetration and security audits. Evaluate results, develop and implement recommendations, improvements, and new technologies.</li><li>
Operate as the primary and principal respondent to compromise, including ransomware. Coordinate and oversee the response including managing a third-party cyber response team(s). Execute remediation and recovery protocols. Work with departments, groups and other catholic entities to assist in recovery.</li><li>
Develop and foster working relationships with global providers of security related solutions and services. Negotiate contracts and agreements that best serve the archdiocese and its constituents.</li></ul> 

Incident Response: 
<ul><li>
Provide cyber incident tier 1 and tier 2 response and support at the Pastoral Center and at parishes.</li><li>
Rapid response to malware, and hacking attempts. Manage the execution of response plans.</li><li>
Work as the Primary Point of Contact with third party cyber response and forensic service providers.</li><li>
Respond to critical security related issues on a 24X7 basis. Be available by cellphone.</li><li>
Administer, maintain and test Disaster Recovery (DR) protocols, systems and solutions. Develop and document DR protocols and procedures.</li></ul> 

Operations:<ul><li>
Harden and ensure network and systems security and integrity protecting data and technology assets from loss, failure, and internal and external threats.</li><li>
Monitor and administer ITD security solutions and platforms.</li><li>
Identify internal and external threats and mitigate as appropriate.</li><li>
Ensure least privilege (Principal of Least Privilege), is being appropriately applied,</li><li>
Working closely with the Systems and Network Manager, monitor and respond to security alerts, quarantine suspicious emails, etc. Adjust systems rules and policies to maximize resilience to security threats that place resources and data at risk.</li><li>
Enhance and update the existing cyber-training materials and solutions.</li><li>
Review technical documentation including legal agreements, SOC reports, etc., as part of evaluating service providers.</li><li>
Administer and utilize portals for device management, security oversight, network monitoring, etc., with appropriate evaluation, response and escalation.</li><li>
Support, manage, maintain, Firewall policies and rules.</li><li>
Ensure the physical security of the network including locking down public accessible spaces, monitoring network activity and responding to hostile activity and attacks.</li><li>
Provide support for building security including security cameras and door access systems.</li><li>
Provide technical support.</li><li>
Work within the ITD team and/or vendors, assisting with desktop/laptop/server and peripheral equipment deployments ensuring compliance with all security related policies and best practices.</li></ul> 

Audits:<ul><li>
Audit and ensure remote office locations are complying with best practices for systems and information management.</li><li>
Perform security audits and evaluations on existing servers, solutions and platforms including custom developed solutions.</li><li>
Perform routine penetration and security testing, implement mitigation strategies.</li><li>
Perform routine data audits to secure PII and ensure data storage and use is compliant with all ITD policies and procedures. Identify and locate all PII ensuring users are appropriately trained in best practices to prevent data theft or loss.</li><li>
Audit SOC reports on an annual basis of all critical enterprise systems.</li><li>
As required, evaluate server patch requirements and ensure server patching is current.</li><li>
Perform regular user account audits.</li></ul> 

Projects and Improvements:<ul><li>
Evaluate and recommend security related products and services for use at the Pastoral Center as well as more broadly across the archdiocese.</li><li>
Create, lead and document projects in support of networks, systems and information security and controls.</li><li>
Implement comprehensive DLP policies and technologies.</li><li>
Other assigned duties, projects, and activities. Not all assigned ITD projects and activities will be solely security based or related.</li></ul> 

QUALIFICATIONS: 
To perform this job successfully, an individual must be able to perform each essential duty to an acceptable professional level. The requirements listed below are representative of the knowledge, skill, and/or ability required. 
 
Education and Certification<ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in the field of Information Technology, Computer Networking, Network and Systems Administration, Network Engineering, Computer Science, Information Sciences, Information Security, IT Project Management, or a similar related field.</li><li>
Certified Information Systems Security Professional (CISSP).</li><li>
Microsoft 365 Certified Fundamentals (MS-900), Microsoft Certified: Security Administrator Associate, Microsoft Certified: Enterprise Administrator Expert are a plus.</li><li>
Project Management Certification(s) such as PMP or CAPM is a plus.</li></ul> 

General Knowledge and Experience<ul><li>
Familiarity with industry standards regarding technology, data and information security and protection including, SOC, ISO, PII, PCI, NIST Framework, etc.</li><li>
Demonstrated relevant work experience with all aspects of securing a complex network environment.</li><li>
Demonstrated ability to present, teach, and mentor small and large groups including technical and non-technical staff.</li></ul> 

Technical Knowledge and Experience<ul><li>
Seven years prior experience of systems administration, network and application security and control.</li><li>
Expertise in various security related technologies and solutions.</li><li>
Azure and or AWS and or GCP</li><li>
Microsoft Azure, Intune, Defender for Identity, Entra, Purview, Security, DLP.</li></ul> 

Personal Attributes:<ul><li>
Excellent organizational, communication, presentation, and teaching skills.</li><li>
Effectively and professionally interface with both technical and non- technical colleagues and staff.</li><li>
Able to work closely with a small group of professionals with specific areas of responsibility while assuming secondary support and backup roles.</li><li>
Self-starter, self-learner, self-motivated.</li><li>
Cleary and strongly demonstrates a sense of responsibility, ownership, and leadership.</li></ul> 

PHYSICAL PERFORMANCE ELEMENTS:<ul><li>
Ability to use a computer keyboard for up to 8 hours/day.</li><li>
Ability to access and discern needed information from equipment, tags, or service portals.</li><li>
Ability to sit for up to 8 hours/day.</li><li>
Ability to lift up to 50 pounds.</li></ul> 

OTHER WORK REQUIREMENTS: 
<ul><li>
Occasionally work evenings and weekends as required.</li><li>
Travel to remote offices including parish locations, for audits, training, and support activities.</li><li>
Business Casual attire.</li></ul> 
Salary range $118,000 - $127,000 per year 
To apply please send resume and cover letter to HR_Staffing@rcab.org. 
 
The duties and requirements described above are representative of those encountered during performance of the essential functions of this job. Reasonable accommodation may be made to enable qualified individuals with disabilities to perform the essential functions.</div>

Cybersecurity Program Manager (FT)

State of Maine

<div><h2 class="jobSectionHeader">If you are a current State of Maine employee, please submit your application through the internal application process using the Find Jobs report in PRISM. Seasonal employees who do not have PRISM access should apply through the State&rsquo;s career page and indicate on the application that they have previously worked for the State.
</h2>.
Office of Information Technology
Opening Date: March 02, 2026
Closing Date: March 13, 2026
Job Class Code: MK32
 
Grade: 32 Confidential
 
Salary: $101,264.80 - $143,095.68*/Annually (*Includes 30% recruitment and retention stipend)
 
Position Number: 004250769
Position Type: Full-Time
Location: Augusta
Telework: Available
OVERVIEW:
Shape the future of cybersecurity for the State of Maine. As the Cybersecurity Architect Manager, you&rsquo;ll lead a team of security architects and engineers to design and implement robust security frameworks that protect the State&rsquo;s critical systems, assets, and data. Reporting to the State&rsquo;s Chief Information Security Officer (CISO), you&rsquo;ll drive MaineIT&rsquo;s cybersecurity strategy&mdash;balancing innovation with compliance to keep pace with evolving threats.
Hybrid Work Opportunity &ndash; This position has the potential to work from home as much as 90% of the time with management approval.
WHAT YOU'LL DO:
No two days look quite the same in MaineIT&rsquo;s Information Security Office. In general, you can expect to:
<ul><li>Lead &amp; Mentor: Manage a high-performing security architecture team, fostering growth and ensuring successful execution of strategic initiatives.
</li><li>Architect &amp; Implement: Design scalable, adaptable security solutions aligned with industry best practices and emerging risks.
</li><li>Integrate Security: Oversee integration of tools and protocols across platforms and projects, embedding security into every stage of the technology lifecycle.
</li><li>Collaborate Across Teams: Partner with departments statewide to ensure security solutions align with business needs and regulatory requirements.
</li><li>Evaluate Vendors: Conduct vendor risk assessments and audits, holding partners accountable for maintaining the State&rsquo;s data security standards.
</li><li>Partner with GRC and SOC Teams: Work closely with the Governance, Risk, and Compliance (GRC) section to ensure effective risk management and regulatory compliance, while partnering with the Security Operations Center (SOC) to lead incident response efforts and drive continuous improvement in the State&rsquo;s cybersecurity posture.
</li></ul>WHY THIS ROLE STANDS OUT:
As a cybersecurity professional you have a lot of options when it comes to your career. We get it. Here&rsquo;s what sets our role apart:
<ul><li>Strategic Impact: Help shape security policies and practices that affect the entire State of Maine.
</li><li>Fast-Moving Field: Work on the front lines of cybersecurity, implementing advanced tools and strategies to combat new threats.
</li><li>Collaborative Culture: Work closely with leaders across agencies to build innovative, business-aligned security solutions.
</li><li>Career Growth: Access continuous learning and leadership opportunities in a high-impact public service role.
</li><li>Mission-Driven Work: Protect the data and privacy of Maine citizens and contribute to the public good.
</li></ul>WHY YOU'LL LOVE WORKING AT MAINEIT:
If you are seeking a culture that supports growth, fosters success, and want to play a key role in maintaining the confidentiality, integrity, and availability of State of Maine data and systems, then MaineIT is where you need to be! With the MaineIT, Information Security Office can expect:
<ul><li>Generous Telework Opportunities: This position has the opportunity to work up to 90% remotely.
</li><li>Meaningful &amp; Impactful Work: Play a vital role in protecting Maine&rsquo;s digital infrastructure.
</li><li>Supportive Team: Join a collaborative, professional environment that invests in your development.
</li><li>Work-Life Balance: Flexible scheduling and a healthy balance of professional and personal time.
</li><li>Innovative Culture: Be part of a team that values innovation and continuous improvement.
</li></ul>MINIMUM QUALIFICATIONS:
<ul><li>Bachelor&rsquo;s degree in computer science, information technology, cybersecurity, or a related field, AND
</li><li>A minimum of 5 years of experience in cybersecurity or information security roles, with at least at least 3 of those years in a managerial or leadership role overseeing security architecture and strategy.
</li></ul>Special preference will be given to candidates with appropriate certifications (e.g., CISSP, CISM, or similar).
PREFERRED COMPETENCIES:
<ul><li>Strategic &ndash; Expert in designing and implementing scalable security architectures that meet evolving cybersecurity threats and compliance requirements.
</li></ul><ul><li>Collaborative &ndash; Works effectively with GRC and SOC teams to ensure comprehensive risk management, incident response, and continuous security improvement.
</li></ul><ul><li>Adaptable &ndash; Able to quickly assess emerging threats, integrate new technologies, and adjust security strategies to meet the State&rsquo;s evolving needs.
</li></ul><ul><li>Leadership-Oriented &ndash; Skilled at leading and mentoring security and IT professionals, guiding them in implementing security measures that align with business objectives.
</li></ul>CONTACT INFORMATION: For more information or questions specific to the position, please contact recruiting.ggsc@maine.gov
<div>The selected candidate will be required to pass the required background checks (fingerprinting may be required ) as a condition of employment.
</div><div>This position is not eligible for visa sponsorship or STEM OPT extensions.
</div><div><div>Benefits of working for the State of Maine:
</div><div>No matter where you work across Maine state government, you find employees who embody our state motto&mdash;&quot;Dirigo&quot; or &quot;I lead&quot;&mdash;as they provide essential services to Mainers every day. We believe in supporting our workforce's health and wellbeing with a valuable total compensation package, including:
</div><div><ul><li>Work-Life Balance &ndash; Rest is essential. Take time for yourself using 13 paid holidays, 12 days of sick leave, and 3+ weeks of vacation leave annually. Vacation leave accrual increases with years of service, and overtime-exempt employees receive personal leave.
</li></ul></div><div><ul><li>Health Insurance Coverage &ndash; The State of Maine pays 85%-100% of employee-only premiums ($11,857.68-$13,950.24 annual value), depending on salary. Use this chart to find the premium costs for you and your family, including the percentage of dependent coverage paid by the State .
</li></ul></div><div><ul><li>Health Insurance Premium Credit &ndash; Participation decreases employee-only premiums by 5%. Visit the Office of Employee Health and Wellness for more information about program requirements .
</li></ul></div><div><ul><li>Dental Insurance &ndash; The State of Maine pays 100% of employee-only dental premiums ($365.28 annual value).
</li></ul></div></div><div><div><ul><li>Retirement Plan &ndash; The State of Maine contributes 18.91 % of pay to the Maine Public Employees Retirement System ( MainePERS ), on behalf of the employee .
</li></ul></div><div><ul><li>Gym Membership Reimbursement &ndash; Improve overall health with regular exercise and receive up to $40 per month to offset this expense.
</li></ul></div><div><ul><li>Health and Dependent Care Flexible Spending Accounts &ndash; Set aside money pre-tax to help pay for out-of-pocket health care expenses and/or daycare expenses.
</li></ul></div><div><ul><li>Public Service Student Loan Forgiveness &ndash; The State of Maine is a qualified employer for this federal program. For more information, visit the Federal Student Aid office .
</li></ul></div><div><ul><li>Living Resources Program &ndash; Navigate challenging work and life situations with our employee assistance program.
</li></ul></div><div><ul><li>Parental leave is one of the most important benefits for any working parent. All employees who are welcoming a child&mdash;including fathers and adoptive parents&mdash;receive forty-two (42) consecutive calendar days of fully paid parental leave . Additional , unpaid leave may also be available, under the Family and Medical Leave Act .
</li></ul></div><div><ul><li>Voluntary Deferred Compensation &ndash; Save additional pre-tax funds for retirement in a MaineSaves 457(b) account through payroll deductions. 
</li></ul></div><div>State employees are eligible for an extensive and highly competitive benefits package , covering many aspects of wellness. Learn about additional wellness benefits for State employees from the Office of Employee Health and Wellness .
</div><div>Note: Benefits may vary somewhat according to specific collective bargaining agreements and are prorated for anything less than full-time.
</div><div>There's a job and then there's purposeful, transformative work. Our aim is to create a workplace where you can learn, grow, and continuously refine your skills. Applicants demonstrate job requirements in differing ways, and we appreciate that many skills and backgrounds can make people successful in this role.
</div><div>As an Equal Opportunity employer, Maine State Government embraces a culture of respect and awareness. We are committed to creating a strong sense of belonging for all team members, and our process ensures an inclusive environment to applicants of all backgrounds including diverse race, color, sex, sexual orientation or gender identity, physical or mental disability, religion, age, ancestry, national origin, familial status or genetics.
</div><div>If you&rsquo;re looking for a great next step, and want to feel good about what you do, we&rsquo;d love to hear from you. Please note reasonable accommodations are provided to qualified individuals with disabilities upon request.
</div><div>Thinking about applying?
</div><div>Research shows that people from historically excluded communities tend to apply to jobs only when they check every box in the posting. If you&rsquo;re currently reading this and hesitating to apply for that reason, we encourage you to go for it! Let us know how your experience and passion set you apart.
</div><div>If you require a paper application, please download and print one HERE
</div></div>.
If you are unable to complete the online application, please contact the Human Resources representative listed on the job opening you are interested in applying for. They will work with you for an alternative method of submitting.</div>

Public Service Manager II - Cybersecurity Architect Manager

General Motors (GM)

<div>Job Description
The Role
GM&rsquo;s Product Cybersecurity Team safeguards the security and integrity of our vehicle platforms, embedded systems, and connected services across the entire product lifecycle. Our mission is to proactively defend GM products against evolving cyber threats by engineering cybersecurity into every phase &mdash; from concept and architecture through development, validation, production, and in-field operation. We seek product cybersecurity professionals with advanced expertise in secure system design, embedded and automotive security, and risk-based threat analysis, capable of driving security-by-design principles, ensuring compliance with global regulations and standards, and strengthening the resilience of GM&rsquo;s vehicles and mobility ecosystems.
The Connected Vehicle Cybersecurity Manager leads the engineering team responsible for securing the end-to-end connected vehicle ecosystem &ndash; spanning in-vehicle connectivity platforms, telecom interfaces, backend services, certificate lifecycle management (CLM), and mobile integrations.
This role defines and drives the security vision, architecture, and execution strategy for connected ECUs and services. The manager ensures secure design, implementation, and operations across vehicle, cloud, and mobile domains, while maintaining compliance with global automotive cybersecurity regulations and internal standards.
This is a high-impact leadership position interfacing with vehicle engineering, cloud platforms, telecom providers, enterprise security, and product leadership.
What You'll Do:
Leadership &amp; Organization
<ul><li>Lead, grow, and mentor the Connected Vehicle Security engineering team.
</li><li>Drive hiring strategy, capability development, and performance management.
</li><li>Build deep technical expertise in embedded, telecom, and cloud security within the team.
</li><li>Foster a security-by-design culture across vehicle programs.
</li></ul>Security Architecture &amp; Strategy
<ul><li>Define and maintain security architecture for:
<ul><li>Connected ECUs (telematics control units, infotainment systems, connectivity SoCs)
</li><li>ADAS systems, CLM design
</li><li>Vehicle-to-cloud communications
</li><li>Backend services communicating with vehicles including CLM, IAM, APIs, and OTA
</li></ul></li><li>Establish and maintain security requirements aligned to:
<ul><li>ISO/SAE 21434
</li><li>UNECE WP.29 R155 / UNECE WP.29 R156
</li></ul></li><li>Own threat modeling (TARA) and risk treatment decisions for connected systems.
</li><li>Define cryptographic architecture (PKI, key hierarchy, provisioning, rotation, revocation).
</li></ul>Secure Design &amp; Control Implementation
Oversee the design and deployment of security controls including:
<ul><li>Secure boot &amp; hardware root of trust (HSM / TPM-based).
</li><li>Firmware signing &amp; OTA protection.
</li><li>OS hardening (Linux/QNX/Android-based IVI platforms).
</li><li>TLS/mTLS implementation for vehicle-to-cloud communication.
</li><li>Token-based authentication &amp; OAuth flows.
</li><li>Certificate Lifecycle Management (development, provisioning, renewal, revocation, backend trust anchors, etc.)
</li><li>Secure API gateways and backend authentication services.
</li><li>Secure telecom integration (eSIM, 4G/5G, V2X security).
</li></ul>Program Governance &amp; Lifecycle Security
<ul><li>Govern cybersecurity engagement across connected vehicle programs:
<ul><li>Security intake
</li><li>Architecture reviews
</li><li>Design assessments
</li><li>Penetration testing reviews
</li><li>Security sign-off gates
</li></ul></li><li>Track and manage:
<ul><li>Cybersecurity risks
</li><li>Deviations and compensating controls
</li><li>Open vulnerabilities
</li></ul></li><li>Ensure traceability from cybersecurity requirements to validation artifacts.
</li><li>Support CSMS evidence generation and audit readiness.
</li></ul>Incident Response &amp; Vulnerability Management
<ul><li>Provide leadership oversight for vulnerability management across:
<ul><li>In-vehicle connectivity stacks
</li><li>Mobile integrations
</li></ul></li><li>Coordinate incident response with enterprise security teams.
</li><li>Define connected vehicle patching and remediation strategy.
</li><li>Support external researcher engagement and responsible disclosure handling.
</li></ul>Stakeholder &amp; Executive Communication
<ul><li>Communicate security strategy, trade-offs, and risk posture to senior leadership.
</li><li>Translate technical risk into business impact.
</li><li>Provide security health metrics for connected platforms.
</li><li>Represent Connected Vehicle Security in executive and regulatory reviews.
</li></ul>Your Skills &amp; Abilities (Required Qualifications)
<ul><li>Bachelor&rsquo;s degree in Computer Science, Electrical Engineering, Cybersecurity, or related field.
</li><li>8+ years in automotive cybersecurity, embedded security, telecom security, or cloud security.
</li><li>Demonstrated hands-on experience with:
<ul><li>Connected ECUs ( TCU, IVI, connectivity modules )
</li><li>PKI / certificate management systems
</li><li>Secure communication protocols ( TLS, IPsec, DoIP, CAN security )
</li></ul></li><li>Proven people leadership experience (team lead, engineering manager, or equivalent).
</li></ul>What Will Give You a Competitive Edge (Preferred Qualifications)
<ul><li>Experience implementing ISO/SAE 21434 -compliant development processes.
</li><li>Familiarity with UNECE R155/R156 regulatory expectations.
</li><li>Experience with:
<ul><li>HSM -based key storage
</li><li>Secure provisioning at manufacturing
</li><li>OTA security architecture
</li><li>Telecom security ( eSIM , carrier integration)
</li><li>Cloud-native security controls (IAM, zero trust, API security )
</li></ul></li><li>Strong understanding of threat modeling ( TARA ), penetration testing, and red-team findings in automotive.
</li><li>Experience working in a global OEM or Tier-1 environment.
</li></ul>&amp;#xa;&amp;#xa;GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future. This includes direct company sponsorship, entry of GM as the immigration employer of record on a government form, and any work authorization requiring a written submission or other immigration support from the company (e.g., H1-B, OPT, STEM OPT, CPT, TN, J-1, etc).&amp;#xa;&amp;#xa;This role is categorized as hybrid. This means the selected candidate is expected to report to a specific location at least 3 times a week {or other frequency dictated by their manager}.&amp;#xa;&amp;#xa;This job may be eligible for relocation benefits.&amp;#xa;&amp;#xa;
About GM
Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.
Why Join Us
We believe we all must make a choice every day &ndash; individually and collectively &ndash; to drive meaningful change through our words, our deeds and our culture. Every day, we want every employee to feel they belong to one General Motors team.
Benefits Overview
From day one, we're looking out for your well-being&ndash;at work and at home&ndash;so you can focus on realizing your ambitions. Learn how GM supports a rewarding career that rewards you personally by visiting Total Rewards resources .
Non-Discrimination and Equal Employment Opportunities (U.S.)
General Motors is committed to being a workplace that is not only free of unlawful discrimination, but one that genuinely fosters inclusion and belonging. We strongly believe that providing an inclusive workplace creates an environment in which our employees can thrive and develop better products for our customers.
All employment decisions are made on a non-discriminatory basis without regard to sex, race, color, national origin, citizenship status, religion, age, disability, pregnancy or maternity status, sexual orientation, gender identity, status as a veteran or protected veteran, or any other similarly protected status in accordance with federal, state and local laws.
We encourage interested candidates to review the key responsibilities and qualifications for each role and apply for any positions that match their skills and capabilities. Applicants in the recruitment process may be required, where applicable, to successfully complete a role-related assessment(s) and/or a pre-employment screening prior to beginning employment. To learn more, visit How we Hire .
Accommodations
General Motors offers opportunities to all job seekers including individuals with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, email us or call us at 1-800-865-7580. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.</div>

Manager - Connected Vehicle Cybersecurity

Qiddiya Investment Company

<div>Qiddiya Investment Company is at the forefront of developing a revolutionary entertainment and cultural destination in Saudi Arabia, and we are currently looking for a Senior Manager - Cybersecurity Strategy to join our dynamic team. In this strategic leadership role, you will be responsible for shaping and driving the cybersecurity strategy that protects our assets and ensures the integrity of our projects.
You will work closely with various stakeholders to identify risks, align cybersecurity initiatives with business goals, and foster a culture of security awareness across the organization.
Responsibilities<ul>
<li>Develop and execute a comprehensive cybersecurity strategy that aligns with Qiddiya&rsquo;s overall mission and goals.</li>
<li>Assess organizational cybersecurity risks and vulnerabilities, providing guidance and recommendations for mitigation.</li>
<li>Collaborate with executive leadership to integrate cybersecurity priorities into the company&rsquo;s strategic planning and operational processes.</li>
<li>Lead the development of policies and procedures to ensure effective management of cybersecurity risks.</li>
<li>Oversee the implementation of cybersecurity programs, initiatives, and technologies to enhance enterprise security posture.</li>
<li>Evaluate and advise on third-party security risks associated with vendors, partners, and contractors.</li>
<li>Coordinate cybersecurity training and awareness programs across the organization.</li>
<li>Monitor industry trends, emerging threats, and regulatory changes to ensure the company&rsquo;s security practices remain relevant and effective.</li></ul> 

Requirements 
<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, Business Administration, or a related field; a master&rsquo;s degree is preferred.</li>
<li>10+ years of experience in cybersecurity, with significant experience in strategic roles or developing cybersecurity programs.</li>
<li>Proven track record in risk management, compliance, and developing enterprise-wide cybersecurity strategies.</li>
<li>Strong understanding of cybersecurity frameworks, regulations, and best practices.</li>
<li>Excellent leadership and managerial skills with a focus on collaboration and stakeholder engagement.</li>
<li>Outstanding analytical and communication skills to effectively convey complex ideas to various audiences.</li>
<li>Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent are highly desirable.</li> 
</ul> 
 
Benefits 
Comprehensive benefits package</div>

Senior Manager - Cybersecurity Business Partner

Smart & Final

<div>Manager, Cybersecurity 
Store Support Center
We are searching for an experienced Manager, Cybersecurity for our Store Support Center located at 600 Citadel Drive, Commerce, CA, 90040.

SUMMARY
 
The Cybersecurity Manager leads the development and execution of our organization&rsquo;s cybersecurity strategy. You will oversee the protection of digital assets, ensure compliance with industry standards, and mitigate risks across IT systems, networks, and data. This role is critical to safeguarding business operations, customer trust, and maintaining resilience against evolving cyber threats. This includes the oversight of all cybersecurity architecture and cybersecurity engagement functions such as incident response, threat intelligence, IoT security, systems operations/engineering (SecOps), architectural support, secure design, risk analysis, vulnerability management and threat hunting across corporate, stores and cloud environments. 
The position balances security enforcement, business continuity, warehouses and store operations. 
 
ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties may be assigned or required. 
<ul><li>
Design, develop, Implement and manage cybersecurity policies, protocols, tools and incident response plans aligned with NIST Framework or ISO 27001</li><li>
Oversee vulnerability scanning and remediation program. Prioritize risks based on business impact and address risks. Identify systemic security weaknesses</li><li>
Supervise cybersecurity SOC/MDR, consultants, SaaS providers and IT professionals, ensuring effective threat monitoring, incident response, and resource allocation.</li><li>
Implement and maintain security tools (firewalls, encryption, intrusion detection) and ensure timely system updates/patches</li><li>
Work together with Risk, Compliance and IT functions to identify, mitigate and manage security risks aligning with the organizational goals and objectives.</li><li>
Lead breach investigations, coordinate forensic analysis, and communicate with stakeholders during crises</li><li>
Monitor third-party security practices and ensure adherence to data privacy laws (e.g., CCPA)</li><li>
Recommend and implement security solutions or enhancements to existing security solutions to improve overall enterprise security.</li><li>
Overseas the administration, design, configuration, integration, and maintenance of the company&rsquo;s security architecture, including the following solutions:<ul><li>
SIEM, MDR and EDR</li><li>
Email security</li><li>
SASE platform</li><li>
Network Firewalls</li><li>
File Integrity Monitoring solution</li><li>
Identity Management, SSO &amp; MFA</li><li>
Privileged Access Management</li><li>
Network Access Control</li><li>
Microsoft 365 Security</li></ul></li><li>
Be a final resource in the security incident response planning as well as the investigation of security events including being the technical lead and subject matter expert in the Security Incident Response Team (SIRT), as needed.</li><li>
Exercises discretion and independent judgment in evaluating challenges and limitations to determine appropriate resolutions that strengthen the organization&rsquo;s security posture.</li><li>
Performs related duties as assigned.</li></ul>
EDUCATION and/or EXPERIENCE 
 
<ul><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or related field or equivalent experience; master&rsquo;s degree preferred Any or all of the following certifications are preferred: CISSP, CISMP.</li><li>
 7 years of experience with 4+ years in Security operations leadership role, which may include information security, application security or penetration testing, network-related security roles (firewall, intrusion detection, data loss prevention, Identity Management)..</li></ul>
OTHER KNOWLEDGE, SKILLS &amp; ABILITIES 
<ul><li>
Strong infrastructure security skills including IDS/IPS, firewall, SIEM, server and OS hardening, malware detection, physical security, transport and at-rest encryption on file systems, DB, and other data persistence mechanisms.</li><li>
Excellent written and verbal communication skills - including the ability to effectively communicate security- and risk-related concepts to technical and nontechnical audiences - and strong interpersonal and collaborative skills</li><li>
High level of personal integrity, with the ability to handle confidential and otherwise sensitive matters professionally and with the appropriate level of judgment and maturity.</li><li>
Demonstrated experience in executing/delivering cross functional projects in a dynamic, fast-paced environment with a sophisticated ability to balance between security strategies and other priorities at the organizational level.</li><li>
Ability to formulate conclusions and recommend courses of action.</li><li>
Excellent organizational skills and adept at multi-tasking and initiating/driving projects though completion.</li><li>
Collaborate with IT Infrastructure team, Network team, Application teams, store operations, executives and etc.</li><li>
Incident management &amp; decision-making</li><li>
Risk-based decision making</li><li>
Ability to balance security vs business disruption</li><li>
Vendor &amp; stakeholder management</li></ul> 

COMPENSATION: The salary range for this position is $135,000.00 to $150,000.00. The actual starting pay will be determined by a number of qualifications; including, experience and relevant skills. 
 
Our company provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics.</div>

Manager, Cybersecurity

Search 10000+ Cybersecurity manager jobs near you this March. New roles added regularly across leading industries. Apply today.