cybersecurity operations manager

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking incumbent and external qualified candidates to support North American Aerospace Defense Command (NORAD) Cheyene Mountain Complex (NCMC) &ndash; Integrated Tactical Warning/Attack Assessment (NCMC-ITW/AA) and Space Support Contract III (NISSC III).</div><div><br>
Please note that this is contingent upon contract award, with an anticipated decision expected by summer 2026.</div><div><br>
Qualified candidates will help operate, maintain, and sustain critical national mission systems to deliver resilient strategic threat warning and space capabilities as part of a world-wide architecture, providing strategic warning that our nation depends on during a conflict. This program will provide an opportunity to exploit the capabilities inherent in our diverse national systems to better meet the needs of the national command authority and warfighters to detect, track, and respond to strategic threats through 2030 and beyond.</div><div></div><div><br>
We are seeking a highly experienced <b>Cyber Security professional </b>to serve as the Senior Cybersecurity Task Manager and primary cyber security point of contact (POC) for this mission critical program.</div><div></div><div><b><br>
Key Responsibilities:</b></div><ul><li>
Oversee the design, development, and implementation of security requirements within an organization&rsquo;s business processes.</li><li>
Confirm documentation is prepared from information obtained from customers using accepted guidelines.</li><li>
Verify training materials, technical material and data address relevant RMF</li><li>
Coordinate the preparation of security test and evaluation plans</li><li>
Select and work with suppliers and designers to develop and finalize the MSOC and BMSOC design and coordinate the design with the Customer for approval with programmatic functional teams and the Customer.</li><li>
Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments.</li><li>
Serve as the primary cybersecurity POC for the program.</li><li>
Investigate and analyze unique or highly technical operational and Customer issues by providing technical assistance in establishing procedures and processes to resolve or avoid similar issues in the future.</li><li>
Analyze policies and procedures against Federal laws and regulations and provide recommendations for closing gaps.</li><li>
Recommend system enhancements to improve security deficiencies.</li><li>
Develops, tests, and integrates computer and network security tools.</li><li>
Review and evaluate complex non-nominal observations to include crew deviations and implement corrective action as needed.</li><li>
Oversee the inclusion of securing of system configurations and installation of security tools, system scans to determine compliance. document, report results and evaluate products and various aspects of system administration.</li><li>
Conducts security program audits and develops solutions to lessen identified risks.</li><li>
Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.</li><li>
Oversee the completion of computer incident investigations.</li><li>
Confirm that vulnerability assessments including development of risk mitigation strategies are performed</li><li>
Interface with government Customers, vendors, subcontractors, and program members to resolve cybersecurity related technical and quality problems.</li><li>
Perform complex technical surveillance to improve operational support, improve procedures, identify improvements in software, and increase quality by reducing operational risk.</li><li>
Provide guidance to Customer and program leadership in the areas of producibility, cybersecurity processes, equipment improvement, quality control, software quality and configuration management, and procurement</li><li>
Communicate and collaborate effectively with stakeholders to foster support for program objectives.</li><li>
Oversee project efforts to ensure cybersecurity execution remains on schedule and within budget.
</li><li>Work with PMO and TPOCs to define cybersecurity requirements, schedules, performance criteria, project kick-off briefings, and other technical reports and documents as required for program deliverables.</li><li>
Provide recommendations based on technical assessments and present findings to key decision-makers.</li><li>
Attend and host meetings as required by the Customer or in support of Customer defined deliverables and brief cybersecurity reports and findings as required.</li><li>
Supervise and mentor junior cybersecurity professionals as needed.</li><li>
Ensure seamless communication and collaboration across programmatic functional teams.</li><li>
Support the PMO by conducting programmatic and technical evaluations.</li><li>
Manage multiple projects and priorities effectively.</li></ul><div></div><div><b><br>
****This position is contingent upon award of contract****</b></div></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><div><b>
Required Qualifications:</b></div><ul><li>
Ten 10 years of relevant experience developing cybersecurity requirements, schedules, FTE estimates, performance criteria, CDRL definitions, and project kick-off briefings.</li><li>
Active TS/SCI clearance.</li><li>
Proven ability leading cybersecurity operations in relation to space operational and or ground systems</li><li>
Previous experience developing and implementing cybersecurity procedures and processes IAW NIST 800-53 and DOD RFM.</li><li>
Previous experience evaluating cybersecurity measures and techniques for compliance to meet DoD and NIST requirements demonstrated by successfully completing CCRI or CORA inspection.</li><li>
Experience leading teams of more than 10 technical IT and Cybersecurity engineers.</li><li>
Ability to travel 25% of the time while meeting operational obligations.</li></ul><div></div><div><b><br>
Desired Qualifications:</b></div><ul><li>
Military training that meets 8140.03 &ldquo;Advanced Technical Expertise&rdquo; requirements CISSP, CISM, GSLC, CISSP-ISSMP, or CISA Certification</li><li>
Experience supporting facility design and development or upgrade</li><li>
Previous experience associated with Resilient MW/MT, OPIR, or Space Systems operations is highly desired.</li><li>
Expertise in theory of operations, performance characteristics, vulnerability, and employment of foreign weapons systems.</li><li>
Experience leading analysis, evaluation, and assessment of intelligence information on defensive systems and technologies.</li></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

CYBERSECURITY OPERATIONS LEAD

ARCO a Family of Construction Companies

<div>ABOUT YOU:
<div>
Do you have a passion for enabling business with secure, top-tier technology? Do you thrive in a fast paced and ever-evolving environment? Then we have the next career move for you! Who are we? We are ARCO, a Family of Construction Companies.</div><div></div><div><br>
The Services Manager, Cybersecurity Operations leads ARCO&rsquo;s day-to-day security monitoring, detection, and incident response activities. This role manages a team of Cybersecurity Analysts, oversees core security tools, and partners closely with Infrastructure, Applications, and GRC to maintain a strong, resilient security posture. This position is both strategic and hands-on, driving operational excellence, threat mitigation, and continuous improvement.</div><div></div><div><br>
As a senior member of the team, the role requires a strong ability to lead and mentor team members through the strategy directed by senior management. In addition to technical skills, the Services Manager is results-oriented and demonstrates effective problem-solving and communication skills.</div>
WHAT WE CAN OFFER YOU:
<p>
We are dedicated to the well-being of our associates and are proud to be consistently recognized as a Best Place to Work. Our compensation and benefits package not only supports our associates and their families but benefits local communities and communities around the world.
</p><ul><li>Industry-leading performance-based bonus program</li><li>
100% company funded retirement contributions</li><li>
Traditional and Roth 401k</li><li>
Tuition reimbursement for associates</li><li>
Scholarship for associates&rsquo; children up to $28,000 per child</li><li>
1-month paid sabbatical after every five years of employment, plus $5,000 for travel</li><li>
1-week paid volunteer leave each year</li><li>
100% charitable match</li><li>
Medical, dental, and vision insurance coverage
</li><li>100% paid 12-week maternity leave</li></ul><div></div><p><br>
At ARCO, our first core value is to treat people fairly and do the right thing. We are committed to building and sustaining a culture that supports diversity and inclusion. We are proud to be an equal opportunity employer, and all qualified applicants will receive consideration for employment.</p><p></p><p><br>
From recruiting, training, and hiring practices to selecting our subcontractors, we understand that diversity of all those involved in the construction process enhances our ability to deliver the best solutions to our customers. We hire the best and the brightest from across the country &ndash; constructing a team of experts in architecture, design, engineering, project management, and business services.</p>
A DAY IN THE LIFE:
<ul><li><div>Lead, mentor, and develop a team of Cybersecurity Analysts responsible for monitoring, triage, and incident response.</div></li><li><div>
Oversee daily SOC operations and ensure timely, effective handling of security alerts and requests.</div></li><li><div>
Automate repetitive tasks and implement process improvements to enhance efficiency.</div></li><li><div>
Maintain and update runbooks, SOPs, escalation workflows, and operational playbooks.</div></li><li><div>
Lead all security incident investigations, containment, and remediation activities.</div></li><li><div>
Conduct regular incident response exercises and postmortems, identifying root causes and tracking improvements.</div></li><li><div>
Stay current on emerging threats and assess ARCO&rsquo;s readiness to defend against them.</div></li><li><div>
Manage and optimize security tooling (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, threat intel platforms, etc.).</div></li><li><div>
Oversee vulnerability scanning, prioritization, and remediation with Infrastructure partners.</div></li><li><div>
Support patching, hardening, and secure configuration efforts across systems and networks.</div></li><li><div>
Guide engineering, deployment, and documentation of security tools.</div></li><li><div>
Support audits, evidence requests, and compliance requirements (NIST 800-171, CMMC, NIST CSF) in partnership with GRC.</div></li><li><div>
Develop metrics and dashboards that measure organizational risk and SOC performance.</div></li><li><div>
Communicate security risks and incident updates to leadership in clear business terms.</div></li><li><div>
Ensure required security awareness training and phishing simulations are delivered effectively.</div></li><li><div>
Participate in change management, project reviews, and technology planning discussions.</div></li><li><div>
Collaborate with Technology teams to identify security gaps and strengthen overall posture.</div></li></ul>
NECESSARY QUALIFICATIONS:
<ul><li><div>7-10 years of cybersecurity operations/engineering experience, including monitoring and incident response.</div></li><li><div>
Experience leading people, developing talent, and managing high-performing teams.</div></li><li><div>
Hands-on experience with core security technologies (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, vulnerability management, threat intel, SOAR).</div></li><li><div>
Strong communication skills with the ability to translate technical issues into business risk.</div></li><li><div>
Proven ability to drive measurable improvements in SOC performance.</div></li><li><div>
Strong organizational skills with the ability to prioritize and delegate.</div></li><li><div>
Experience with Azure or AWS environments.</div></li><li><div>
Familiarity with industry frameworks (NIST 800-171, CMMC, NIST CSF).</div></li><li><div>
Preferred certifications: CISSP, CISM, SANS/GIAC, CySA+, or similar.</div></li><li><div>
Travel: Up to 10%</div></li></ul>
LEGAL DISCLAIMER:
<div>
EOE, including disability/vets</div></div>

Services Manager, Cybersecurity Operations

Booz Allen Hamilton

<div>Cybersecurity &amp; Risk Management Framework Specialist<p><b>
The Opportunity:</b></p><p>
Manage the application of analytical risk management principles that enable organizations to achieve mission assurance by preparing for, preventing, mitigating, responding to and recovering from emergencies. Apply advanced skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction. Mentor and supervise team members. Support enterprise cybersecurity governance, risk management, compliance, and innovation activities for Department of War (DoW) information systems and networks. Assume responsibility for developing cybersecurity strategies, managing the Risk Management Framework (RMF) process, ensuring regulatory compliance, and supporting mission partners with cybersecurity risk mitigation and emerging threat awareness. Work across multiple cybersecurity functions including Governance, RMF operations, compliance monitoring, and cyber threat innovation initiatives.</p><p></p><p><b>
You Have:</b></p><ul><li>
5+ years of experience with IT operations or cybersecurity</li><li>
Experience in a cybersecurity compliance, operations, or engineering leadership role</li><li>
Experience supporting cybersecurity compliance, audits, or inspections</li><li>
Ability to work with and guide senior leaders, including CISO, CIO, and CTO, and executives to ideate, build, and execute cybersecurity capability maturation</li><li>
Ability to collaborate with project and proposal teams to incorporate cybersecurity solutions and develop high quality implementation plans and roadmaps</li><li>
Ability to author technical documentation, whitepapers, and blogs on leading cybersecurity topics and concepts</li><li>
TS/SCI clearance</li><li>
HS diploma or GED</li><li>
Information Security Certification, including CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification</li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li>
Experience working defense or national security issues in the Indo-Pacific region</li><li>
Experience working at DoW Command-level Headquarters</li><li>
Experience with NIST 800-53 and DoD 8500/8510</li><li>
Experience selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations</li><li>
Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)</li><li>
Knowledge of the Enterprise Mission Assurance Support Service (eMASS) and Mission Partner Engagement (MPE)</li><li>
Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data</li><li>
Ability to support the development of cybersecurity policies or governance frameworks</li><li>
Possession of excellent verbal and written communication skills</li><li>
Bachelor's degree</li></ul><p></p><p><b>
Clearance</b><b>:</b></p><p>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Work Model</b><br>
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.</p><ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Cybersecurity & Risk Management Framework Specialist

Department of Administrative Services

<div><div>Initial Posting Date:</div>
03/19/2026<div></div><div>
Application Deadline:</div>
04/05/2026<div></div><div>
Agency:</div>
Department of Administrative Services<div></div><div>
Salary Range:</div>
$8,717 - $13,477<div></div><div>
Position Type:</div>
Employee<div></div><div>
Position Title:</div>
SOC Manager (IT Cyber Security Manager 2)<div></div><div>
Job Description:</div><div>
Now Hiring, Apply Today! SOC Manager (IT Cyber Security Manager 2)</div><div><div>
Enterprise Information Services</div> (EIS) is a state government-wide information technology (IT) organization led by Oregon&rsquo;s State Chief Information Officer (CIO). The <div>Cyber Security Services</div> (&ldquo;CSS&rdquo;) is an information security management section within EIS. CSS&rsquo;s mission: Leading Oregon Government to safeguard the State&rsquo;s information resources. CSS is comprised of the following units: Governance Risk and Compliance, Enterprise Security Architecture, Network Security, and Security Operations Center (SOC).</div><div></div><div>
What You&rsquo;ll Do</div><div>
As the SOC Manager, you will be at the center of Oregon&rsquo;s cyber defense, the heartbeat of the enterprise, leading the day-to-day operations of the State of Oregon&rsquo;s Security Operations Center and ensuring continuous monitoring, detection, analysis, and response to threats that impact enterprise (State of Oregon) systems and critical public services. You will guide and grow an extremely talented team of SOC analysts, maintain 24x7 readiness, and make sure the tools, workflows, playbooks, and escalation paths are not just documented, but tested and battle-ready. You will turn strategy into action, translate the SOC Director&rsquo;s vision and enterprise direction into operational excellence, and lead the charge during high-impact incidents where clear thinking, calm leadership, and teamwork matter most. Working side-by-side with Network, Endpoint, Cloud, Vulnerability, and agency partners across the state, you will help coordinate response, protect Oregonians&rsquo; data, and continuously strengthen our security posture. This is a role for a leader who thrives in fast-moving environments, loves developing people, and wants to make a real, visible impact&mdash;every day&mdash;on the security and resilience of the State of Oregon.</div><div></div><div>
For a full review of the position duties, details, and working conditions, please click <div>here.</div></div><div></div><div>
This Is What You Need to Qualify</div><ul><li><div>
Six years of supervision, management, or progressively related experience*; OR</div></li><li><div>
Three years of related* experience and a bachelor's degree in a related* field.</div></li></ul><div></div><ul><li>Related qualifying information systems experience in: Microsoft Defender for Endpoint, Identity, Office 365, and Cloud Apps, Attack surface reduction (ASR), device timeline, evidence &amp; response actions, Live response sessions and EDR forensics; Qualifying Bachelor degree in Information Technology, Computer Science, or closely related field.</li></ul><div></div><div>
The ideal candidate will possess the following desired skills and attributes:</div><ul><li><div>
A strong foundation in cybersecurity operations, with the ability to understand, oversee, and guide threat detection, incident response, vulnerability management, and security monitoring across on-premises, cloud, and hybrid environments.</div></li><li><div>
Operational fluency with modern SOC technologies and workflows, including SIEM, EDR/XDR, log management, alerting, case management, and investigation platforms, with the ability to ask the right questions, challenge assumptions, and make informed decisions when not hands-on in the tools.</div></li><li><div>
The mindset of a cyber operations leader, able to direct investigations, validate analyst conclusions, prioritize response actions, and ensure incidents are managed effectively from triage through recovery.</div></li><li><div>
A deep understanding of how enterprise identity, endpoints, networks, cloud services, and security controls interconnect, and how attackers move across them, utilizing the MITRE Att&amp;ck Methods.</div></li><li><div>
Proven ability to build, mentor, and sustain high-performing SOC teams, fostering trust, accountability, resilience, and calm leadership in high-pressure, 24x7 environments.</div></li><li><div>
The judgment to balance risk, impact, and operational tempo, ensuring the right resources are focused on the most critical threats and that staff are supported and not burned out.</div></li><li><div>
The ability to evaluate and improve SOC processes, playbooks, tooling, and staffing models, turning gaps and lessons learned into practical operational improvements.</div></li><li><div>
Strong communication and leadership presence, with the ability to translate technical realities into clear guidance for executives, agency partners, and incident commanders.</div></li><li><div>
Experience coordinating complex incident response efforts across multiple teams, agencies, and external partners, bringing clarity, structure, and confidence during major events.</div></li><li><div>
Extensive experience (typically 7+ years in cybersecurity, including leadership or senior operational roles within a SOC, IR, or security operations environment).</div></li><li><div>
Familiarity with security frameworks and best practices (NIST CSF, incident response lifecycle, MITRE ATT&amp;CK) and how to apply them at an operational and programmatic level.</div></li></ul><div></div><div>
Preference Statement</div><div>
Preference will be given to candidates with one or more of the following certifications: CISSP: (Certified Information Systems Security Professional), SC-200: Microsoft Security Operations Analyst, SC-100: Cybersecurity Architect, AZ-500: Azure Security Engineer, CompTIA CySA+ or Security+ , GIAC (GCIA, GCIH, GMON) for advanced threat hunting.</div><div></div><div>
How to Apply</div><ul><li><div>
Click on the &quot;Apply&quot; link above to complete your online application and submit by the posted closing date and time. For step-by-step instructions click <div>apply to work for the state</div> or <div>current state employee.</div></div></li><li><div>
Required Documents: cover letter and resume</div></li><li><div>
The work experience and/or education section of your application must clearly demonstrate how you meet all the minimum qualifications and desired skills and attributes listed above. Your cover letter should address your skills supporting an enterprise level environment. <i>Failing to attach required documents may result in disqualification of your application.</i></div></li><li><div>
The State of Oregon does not request or require your age, date of birth, attendance or graduation dates from an educational institution during the application process.</div></li></ul><ul><li><div>
Be sure to check Workday and your email for additional tasks and updates. After hitting submit there may be additional required tasks for you to complete prior to the announcement closing. Please save a copy of this job announcement for reference, as it is not available for you to view after the announcement deadline.</div></li></ul><ul><li><div>
If you are requesting Veteran&rsquo;s Preference, you will receive a Workday task to submit your supporting documents. Be sure to submit your documentation prior to the close date of this posting in order to have the preference considered. Click on the following link for additional information on <div>Veterans&rsquo; Preference</div>.</div></li></ul><div></div><div>
Benefits of Joining Our Team</div><div>
The Department of Administrative Services (DAS) Team strives to create an environment that is supportive and encourages work-life balance and innovation. The EIS team is built on collaboration and support. We work together to ensure our customer agencies receive the highest quality of service. We take pride in our work and look for ways to innovate. EIS is committed to hiring highly skilled, diverse and dedicated employees who will bring a unique skill set to the team.</div><div>
Our amazing <div>benefits</div> include:</div><ul><li><div>
Comprehensive Health Coverage: Low-cost medical, vision, and dental plans for you and your family. Additional benefits include life insurance, short- and long-term disability, deferred compensation savings plans, and flexible spending accounts for health and childcare. Optional benefits including life insurance, disability, FSA, and more</div></li><li><div>
Generous Paid Time Off: 11 holidays, 3 personal business days, monthly sick leave and vacation leave that increases with years of service.</div></li><li><div>
Career Development: Opportunities for professional growth and advancement.</div></li><li><div><div>
Get There</div><ul><li>Oregon&rsquo;s easy-to-use carpool matching tool and trip planner.</li></ul></div></li><li><div><div>
Public Service Loan Forgiveness</div>: You may qualify for the PSLF program.</div></li><li><div>
Hybrid Work Opportunity: This position supports a hybrid work schedule. You can expect to work in the office 1 day per week, with work arrangements periodically reviewed to ensure business needs are met.</div></li></ul><div></div><div>
Additional Details</div><ul><li><div>
This announcement is for one, full-time, permanent, Management Service- Supervisory, SOC Manager (IT Cyber Security Manager 2) position and may be used to fill future vacancies.</div></li><li><div>
The salary listed is the non-PERS qualifying salary range. If the successful candidate is PERS qualifying, the salary range will reflect an additional 6.95%.</div></li><li><div>
Review the <div>Classification and Compensation</div> page for more details on the classification, or you may visit our website for information on the job offer process following <div>pay equity</div>.</div></li><li><div>
Applicants must be authorized to work in the United States. Applicants who require VISA sponsorship will not be considered at this time.</div></li><li><div>
Employee will be required to possess and maintain a valid driver&rsquo;s license issued by the state where the employee resides or provide an acceptable alternate form of transportation.</div></li><li><div>
Employee is required to obtain and maintain CJIS clearance.</div></li><li><div>
Finalists will be subject to a computerized criminal history check. Adverse background data may be grounds for immediate disqualification.</div></li><li><div>
If you need an application in an alternate format in order to complete the process or for accommodation requests under the Americans with Disabilities Act (ADA), you may contact the Recruiter, Nancy Karnas at: nancy.karnas@das.oregon.gov | 971-719-3083.</div></li></ul><div></div><div>
Helpful Links &amp; Resources</div><div><div>
How to Set Job Alerts</div> | <div>Workday Applicant FAQ</div> | <div>What You Need to Know to Get the Job</div></div><div><div>
Oregon Job Opportunities Webpage</div> | <div>Classification and Compensation</div> | <div>Pay Equity</div></div><div></div><div><i>
Come for a job. | Stay for a career. | Make a difference... for a lifetime!</i></div><div></div><div><i>
The Department of Administrative Services is an Equal Opportunity, Affirmative Action Employer Committed to Workforce Diversity. At the Department of Administrative Services, we embody the value of hiring a workforce representative of the communities we serve, understanding that a diverse workforce revitalizes our state. We value diversity and foster a positive and welcoming environment where all employees can thrive.</i></div></div><div></div>

SOC Manager (IT Cyber Security Manager 2)

Crowe LLP

<div><p><b>Your Journey at Crowe Starts Here:</b></p><p>
At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you&rsquo;re trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That&rsquo;s why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry.</p><p></p><p><b>
Job Description:</b></p><p>
The Digital Forensics &amp; Discovery (DFD) / Cyber Incident Response (IR) - Operations Manager is responsible for driving operational excellence across the DFD / IR practice. This role ensures projects are appropriately staffed, actively managed, delivered on time, and executed to quality standards.</p><p></p><p>
The Operations Manager partners closely with practice leadership to manage capacity, optimize resource utilization, maintain workflow discipline, and ensure engagements move efficiently from intake through closeout. This individual plays a critical role in protecting delivery quality, improving scalability, and supporting sustainable growth through strong execution management.</p><h1 class="jobSectionHeader"><b><br>
Key Responsibilities</b></h1><p></p><p>
Project Assignment &amp; Capacity Management</p><ul><li>
Own assignment of new work across the DFD / IR team, aligning engagements with skillsets, development goals, and availability.</li><li>
Monitor team capacity and utilization to ensure balanced workloads and proactive resource planning.</li><li>
Identify skill gaps and elevate hiring or development needs to leadership.</li><li>
Provide forward-looking visibility into bandwidth constraints and delivery risks.</li><li>
Monitor temporary time codes and ensure accurate and timely time entry compliance.</li></ul><p><br>
Delivery Oversight &amp; Execution Management</p><ul><li>
Track active engagements to ensure projects remain on schedule, milestones are met, and deliverables meet practice quality standards.</li><li>
Identify delivery risks early and escalate appropriately to practice leadership.</li><li>
Facilitate weekly leadership meetings to track priorities, KPIs, and execution progress.</li><li>
Maintain and optimize workflow tools (e.g., ClickUp) to ensure transparency into project status and team workload.</li><li>
Ensure timelines are met and client commitments are upheld.</li><li>
Provide structured reporting and dashboards to the leadership team on delivery health and capacity metrics.</li></ul><p><br>
Billing Coordination &amp; Project Closeout</p><ul><li>
Partner with Project Executives and the billing team to ensure WIP is billed timely and efficiently.</li><li>
Monitor aging WIP and facilitate resolution of billing blockers.</li><li>
Lead project cleanup and formal closeout processes to ensure administrative and operational completion.</li><li>
Facilitate AR meetings and follow up on outstanding receivables in coordination with leadership.</li><li>
Enter eDiscovery vendor invoices for payment and coordinate storage reporting (EIS to Workday reconciliation).</li></ul><p><br>
Operational Governance &amp; Continuous Improvement</p><ul><li>
Support and reinforce operational standards to ensure consistent delivery quality across engagements.</li><li>
Develop and refine processes, tools, and workflows to improve efficiency and scalability.</li><li>
Ensure adherence to procurement processes and contract management protocols (including coordination within iCertis as needed).</li><li>
Prepare and coordinate materials for practice meetings, leadership updates, and communications.</li></ul><p></p><p>
Qualifications</p><ul><li>
3+ years of experience managing project workflows, staffing models, and resource capacity in a professional services-based organization.</li><li>
Working knowledge and experience within digital forensics, cybersecurity, or eDiscovery.</li><li>
Bachelor&rsquo;s degree in Business, Operations, Management, or related field.</li><li>
Experience working with project management systems (e.g., ClickUp or similar tools).</li><li>
Experience coordinating with billing teams and managing engagement lifecycle processes.</li></ul><p><br>
Core Competencies</p><ul><li>
Digital forensics, eDiscovery, or cybersecurity working knowledge/experience</li><li>
Strong operational execution and follow-through</li><li>
Advanced resource and capacity management skills</li><li>
Ability to manage multiple active projects simultaneously</li><li>
Strong organizational and prioritization skills</li><li>
High emotional intelligence and stakeholder management capability</li><li>
Clear and confident communication skills</li><li>
Process-oriented with a continuous improvement mindset</li><li>
Ability to build strong relationships across stakeholders</li></ul><p></p><p>
We expect the candidate to uphold Crowe&rsquo;s values of Care, Trust, Courage, and Stewardship. These values define who we are. We expect all of our people to act ethically and with integrity at all times.</p><p></p><p>
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Crowe is not sponsoring for work authorization at this time.</p><p></p>
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Crowe, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $79,500.00 - $168,700.00 per year.<p></p><p><b>
Our Benefits:</b><br>
Your exceptional people experience starts here. At Crowe, we know that great people are what makes a great firm. We care about our people and offer employees a comprehensive total rewards package. Learn more about what working at Crowe can mean for you!<br>
<br>
<b>How You Can Grow:</b><br>
We will nurture your talent in an inclusive culture that values diversity. You will have the chance to meet on a consistent basis with your Career Coach that will guide you in your career goals and aspirations. Learn more about where talent can prosper!<br>
<br>
<b>More about Crowe:</b><br>
Crowe (www.crowe.com) is one of the largest public accounting, consulting and technology firms in the United States. Crowe uses its deep industry expertise to provide audit services to public and private entities while also helping clients reach their goals with tax, advisory, risk and performance services. Crowe is recognized by many organizations as one of the country's best places to work. Crowe serves clients worldwide as an independent member of Crowe Global, one of the largest global accounting networks in the world. The network consists of more than 200 independent accounting and advisory services firms in more than 130 countries around the world.<br>
<br>
Crowe LLP provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, sexual orientation, gender identity or expression, genetics, national origin, disability or protected veteran status, or any other characteristic protected by federal, state or local laws.</p><p></p><p>
Crowe LLP does not accept unsolicited candidates, referrals or resumes from any staffing agency, recruiting service, sourcing entity or any other third-party paid service at any time. Any referrals, resumes or candidates submitted to Crowe, or any employee or owner of Crowe without a pre-existing agreement signed by both parties covering the submission will be considered the property of Crowe, and free of charge.</p><p></p>
Crowe will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws.<p></p><p>
Please visit our webpage to see notices of the various state and local Ban-the-Box laws and Fair Chance Ordinances, where applicable.</p><p></p><p>
If you are interested in applying for employment with Crowe and are in need of an accommodation or require special assistance to navigate our website or to complete your application, please visit our Applicant Assistance and Accommodations page for more information: https://careers.crowe.com/crowe-applicant-assistance-and-accommodation</p></div>

Digital Forensics Operations Manager

RATP Dev

<div><h2 class="jobSectionHeader"><b>Cybersecurity Manager</b></h2>
<div><ul><li><div>Fixed-term contract</div>
</li>
<li><div>Full-time</div>
</li>
<li><div>At least 10 years of experience (Professional)</div>
</li>
<li><div>Bachelor degree</div>
</li>
<li><div>Cyber Security Manager/Expert</div></li></ul></div></div>
<br><div><div><div><div><h2 class="jobSectionHeader"><b>Mission
</b></h2><p></p><div><p><b>JOB PURPOSE:</b></p><p>
The Cybersecurity Manager is responsible for the strategic design, implementation, and continuous maturation of the company&rsquo;s cybersecurity posture across all business units. This role oversees local security operations, leads the in-house Security Operations Center (SOC), ensuring compliance with ISO 27001 certification and ensuring alignment with recognized security frameworks (NIST CSF). By leading Governance, Risk, and Compliance (GRC) initiatives and fostering cross-functional partnerships with IT and Digital teams, the Manager ensures the resilience of the organization&rsquo;s digital ecosystem against emerging threats.</p></div></div><p></p><div><br>
<h2 class="jobSectionHeader"><b>Profile
</b></h2><p></p><div><p><b>RESPONSIBILITIES/DUTIES</b></p><p><b>
Cybersecurity Governance &amp; Strategy</b></p><ul><li> Develop and execute the company-wide cybersecurity strategy in alignment with organizational objectives.</li><li> Design, maintain, and enforce a robust suite of security policies, standards, and procedures based on ISO 27001 and NIST CSF to ensure operational consistency.</li><li> Drive the end-to-end ISO 27001 certification lifecycle, including initial gap analysis, control implementation, and final readiness audits.</li><li> Establish a high-maturity GRC ecosystem to centralize risk management, regulatory compliance, and corporate security governance.</li></ul><p><b>
Security Operations &amp; SOC Management</b></p><ul><li> Provide strategic direction and technical mentorship to the SOC team, fostering a culture of continuous learning and incident excellence.</li><li> Standardize SOC workflows&mdash;including SIEM tuning, threat hunting, alert triage, and incident response&mdash;to meet or exceed industry benchmarks.</li><li> Develop and present high-level SOC performance metrics, and KPI dashboards to senior management and relevant stakeholders.</li></ul><p><b>
Technical Security Oversight</b></p><ul><li> Direct the deployment and lifecycle management of advanced security solutions, including Firewalls, EDR/XDR, IDS/IPS, IAM, and Endpoint Protection.</li><li> Coordinate comprehensive vulnerability scans, penetration tests, ensuring prioritized remediation based on business impact.</li><li> Mandate and audit secure configuration standards and &quot;Security by Design&quot; principles across cloud infrastructure, and business applications.</li></ul><p><b>
Cybersecurity Risk Management</b></p><ul><li> Lead enterprise-level cybersecurity risk assessments to identify, evaluate, and mitigate potential threats, maintaining a dynamic and actionable Risk Register.</li><li> Define and oversee the security vetting process for vendors and third-party partners.</li></ul><p><b>
Awareness, Training &amp; Culture</b></p><ul><li> Champion a security-first culture through the design and delivery of a comprehensive cybersecurity awareness program.</li><li> Manage phishing simulations and targeted training campaigns to reduce the organization&rsquo;s human-risk surface.</li></ul><p><b>
Compliance, Audit &amp; Reporting</b></p><ul><li> Act as the primary liaison for internal and external auditors, ensuring the integrity of evidence for ISO 27001 and regulatory audits.</li><li> Continuously monitor the legal and regulatory landscape to ensure organizational compliance with data protection and cybersecurity mandates.</li></ul><p><b>
Safety Responsibilities</b></p><ul><li> Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.</li><li> Comply with the requirements of RDMC RQHSE Policy and Safety Management System.</li><li> Be mindful that Safety, Security, and Environmental protection are everyone&rsquo;s responsibility. All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.</li></ul><p><b>
ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE</b></p><p><b>
QUALIFICATIONS:</b></p><ul><li> Bachelor&rsquo;s degree in Computer Science, Business Information Systems, Information Security or a related field (required).</li><li> CISSP, CISM, or CISA certifications are preferred.</li><li> ISO 27001 Lead Implementer or Lead Auditor is preferred.</li><li> ITIL Foundation is a plus.</li><li> Fluent in English and Arabic, French is a plus.</li></ul><p><b>
KNOWLEDGE:</b></p><ul><li> Advanced understanding of network security, cloud security, cryptography, and application security.</li><li> Strong knowledge of ISO 27001, NIST Cybersecurity Framework, and GRC practices.</li></ul><p><b>
EXPERIENCE:</b></p><ul><li> 10+ years of experience in Cybersecurity roles, with at least 3 years in team leadership.</li><li> Proven experience managing SOC operations and security engineering team.</li><li> Strong track record of cross-functional collaboration and stakeholder engagement.</li></ul><p><b>
DESIRED BEHAVIORS &amp; EXPERIENCES</b></p><ul><li> <b>Influence &amp; Engagement:</b> Builds strong relationships and effectively engages with cross-functional stakeholders to achieve alignment and buy-in.</li><li> <b>Analytical Thinking: </b>Evaluates complex problems, interprets data effectively, and makes sound decisions based on insights.</li><li> <b>Execution Excellence:</b> Delivers high-quality outcomes on time, manages multiple priorities, and ensures effective follow-through.</li><li> <b>Change Agility:</b> Adapts quickly to evolving needs, leads change with confidence, and helps others navigate transitions smoothly.</li><li> <b>Communication:</b> Expresses ideas clearly and professionally, prepares impactful documentation, and engages effectively with diverse audiences.</li><li> <b>Collaboration: </b>Promotes teamwork, shares knowledge openly, and supports others to achieve common goals.</li><li> <b>Attention to Detail:</b> Maintains accuracy and consistency in documentation, reporting, and system configurations.</li><li> <b>Accountability:</b> Demonstrates ownership, responsibility, and reliability in delivering on objectives.</li><li> <b>Resilience:</b> Remains composed under pressure, solves problems calmly, and stays focused on long-term results.</li></ul></div></div></div></div><br>
<p></p>
<div><div><div><h3 class="jobSectionHeader"><b>Location</b></h3>
<p></p><div><div><div><b>Location</b></div></div><b>
</b><div><b>Address</b></div><b>
</b></div><p>Cairo, Cairo, Egypt</p></div></div></div></div><div></div>

Cybersecurity Manager

MILAHA

<div><div>Internal Communication
<br>
<ul><li>VP &ndash; Cybersecurity
</li><li>Fleet Operations &amp; Ship Management
</li><li>Fleet IT Support
</li><li>Business Units
</li><li>SOC Team
</li></ul></div><div>Purpose
<br>
<ul><li>Provide updates on OT security program progress, incidents, and compliance status.
</li><li>Coordinate OT assessments, remediation efforts, and incident response activities.
</li><li>Collaborate on vessel IT/OT system integration, troubleshooting, remediation, and technical support.
</li><li>Embed OT security into system lifecycles and new cyber-physical projects.
</li><li>Align OT monitoring, vulnerability management, and incident handling with enterprise security operations.<br>
</li></ul></div><p><br>
Occupational Health and Safety &amp; Environment
<br>
Accountability
<br>
Are accountable for their acts and omissions.
</p><div>Responsibility
<br>
<ul><li>To follow agreed safe systems of work; to follow training and instructions; and to report accidents, incidents and near misses.<br>
</li></ul></div><p><br>
Authority
<br>
To stop work if they think the work is unsafe.</p></div><p></p>
<br><div><div>Education &amp; Professional Qualification
<br>
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Electrical/Control Engineering, or related field.
</li><li>Professional certifications preferred: GICSP, ISA/IEC 62443, CISSP, CISM, or equivalent OT/ICS security credentials.<br>
</li></ul></div><div><br>
Professional Experience
<br>
<ul><li>6-8 years of experience in cybersecurity, with at least 3&ndash;5 years focused on OT/ICS or cyber-physical systems security, including experience with vessel OT systems or shipboard cyber audits.
</li><li>Proven experience leading OT security assessments, remediation, and incident response activities.
</li><li>Familiarity with maritime or industrial environments (e.g., shipping, logistics, energy) is highly desirable<br>
</li></ul></div><div><br>
Technical Expertise
<br>
<ul><li>Strong knowledge of OT/ICS protocols, architectures, and vulnerabilities.
</li><li>Hands-on experience with OT system monitoring, incident response, and threat detection.
</li><li>Understanding of international standards and regulations: IMO 2021 Guidelines, IACS E26/E27, NIST CSF, ISA/IEC 62443.
</li><li>Knowledge of IT/OT integration, vessel IT systems, and supporting technologies<br>
</li></ul></div><div><br>
Soft Skills
<br>
<ul><li>Strong analytical and problem-solving skills, with ability to prioritize remediation activities in complex environments.
</li><li>Effective communicator, able to collaborate with fleet operations, IT, vendors, and regulators.
</li><li>High integrity and resilience under pressure, with a proactive and hands-on approach.
</li><li>Ability to train and influence both technical and non-technical stakeholders (e.g., vessel crews, fleet IT support, BU leaders, operations manager).</li></ul></div></div>
<br><div><div>OT Security Program
<br>
<ul><li>Lead Milaha&rsquo;s Vessel OT Cybersecurity Program (assessment and remediation workstreams) as the primary focus, ensuring alignment with IMO and IACS standards.
</li><li>Maintain OT/ICS security baselines, risk register, and remediation roadmap, extending practices to cyber-physical systems in innovation projects.
</li><li>Ensure continuous improvement of OT security posture through assessments, gap closure, and stakeholder engagement.
</li></ul>OT Security Operations
<br>
<ul><li>Manage OT security monitoring, vulnerability management, and anomaly detection across vessel systems.
</li><li>Coordinate OT incident response activities, develop OT-specific playbooks, and integrate maritime threat intelligence into OT operations and response planning.
</li><li>Work with SOC/MSSP partners and fleet operations teams to triage, contain, and recover from OT-related incidents.
</li><li>Ensure enterprise-wide visibility and alignment with Milaha&rsquo;s overall incident management framework
</li></ul>Compliance &amp; Regulatory Alignment
<br>
<ul><li>Ensure ongoing compliance with IMO 2021 Guidelines, IACS Unified Requirements (E26/E27), and other maritime cybersecurity obligations.
</li><li>Support regulatory inspections, classification society reviews, and client cybersecurity audits with OT-specific evidence.
</li><li>Monitor evolving OT regulatory and industry standards, embedding them into Milaha&rsquo;s OT security framework.
</li></ul>Resilience &amp; Continuity
<br>
<ul><li>Integrate vessel OT and other operational systems into Milaha&rsquo;s Business Continuity and Disaster Recovery Plans (BCP/DRP).
</li><li>Conduct OT-focused resilience drills and simulations to validate readiness and recovery capabilities.
</li><li>Align OT recovery strategies with enterprise-wide continuity and disaster recovery requirements.
</li></ul>Stakeholder &amp; Vendor Engagement
<br>
<ul><li>Collaborate with Milaha Ship Management, engineering, and innovation project teams to embed OT security in daily operations and new system lifecycles
</li><li>Provide OT cybersecurity awareness and training to vessel crews and technical staff.
</li><li>Act as the security liaison with OT vendors, shipyards, and classification societies to ensure secure integration and lifecycle governance.
</li><li>Provide OT cybersecurity assurance and audit support for fleet OT systems, shipboard inspections, and classification reviews.
</li></ul>Assignments
<br>
<ul><li>Undertake additional cybersecurity tasks or projects as assigned within the department.
</li><li>Support other cybersecurity initiatives or assignments as required, contributing expertise to cross-pillar to strengthen Milaha&rsquo;s overall cybersecurity posture</li></ul></div></div>
<br><div><div>Education &amp; Professional Qualification
<br>
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Electrical/Control Engineering, or related field.
</li><li>Professional certifications preferred: GICSP, ISA/IEC 62443, CISSP, CISM, or equivalent OT/ICS security credentials.<br>
</li></ul></div><div><br>
Professional Experience
<br>
<ul><li>6-8 years of experience in cybersecurity, with at least 3&ndash;5 years focused on OT/ICS or cyber-physical systems security, including experience with vessel OT systems or shipboard cyber audits.
</li><li>Proven experience leading OT security assessments, remediation, and incident response activities.
</li><li>Familiarity with maritime or industrial environments (e.g., shipping, logistics, energy) is highly desirable<br>
</li></ul></div><div><br>
Technical Expertise
<br>
<ul><li>Strong knowledge of OT/ICS protocols, architectures, and vulnerabilities.
</li><li>Hands-on experience with OT system monitoring, incident response, and threat detection.
</li><li>Understanding of international standards and regulations: IMO 2021 Guidelines, IACS E26/E27, NIST CSF, ISA/IEC 62443.
</li><li>Knowledge of IT/OT integration, vessel IT systems, and supporting technologies<br>
</li></ul></div><div><br>
Soft Skills
<br>
<ul><li>Strong analytical and problem-solving skills, with ability to prioritize remediation activities in complex environments.
</li><li>Effective communicator, able to collaborate with fleet operations, IT, vendors, and regulators.
</li><li>High integrity and resilience under pressure, with a proactive and hands-on approach.
</li><li>Ability to train and influence both technical and non-technical stakeholders (e.g., vessel crews, fleet IT support, BU leaders, operations manager).</li></ul></div></div>

Specialist - Cybersecurity (OT & Cyber Physical)

Search 10000+ Cybersecurity operations manager jobs near you this March. New roles added regularly across leading industries. Apply today.