Cyber Security Manager

Builders Mutual; North Carolina; Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation and bonus

3 weeks of PTO plus birthday off

37.5-hour workweek with early Friday

Professional development through BMU

Volunteer Time Off

Job summary

Builders Mutual Insurance Company is seeking a Cybersecurity Manager to lead our security program, policies, and risk management. This role will report to senior leadership and partner with IT, Application Development, and Infrastructure teams to align security with business goals.

The position is hybrid, based in Raleigh, NC, with a minimum of in-office days and flexible work-from-home options for the remainder of the week.

Qualifications

• Bachelor’s degree or equivalent IT discipline required.
• 5–7 years’ experience in risk management and information security roles.
• 1+ years’ experience with penetration testing of networks or applications.
• Professional information security certifications required (e.g., CISSP, CISM, CompTIA Security+).

Responsibilities

• Establish and maintain a strategic Cybersecurity Program aligned with regulatory requirements.
• Define and enforce security policies, training, and standards for BMIC.
• Lead cloud security controls implementation and monitoring.
• Coordinate risk analysis and risk management across departments.
• Develop disaster recovery policies and incident response plans.
• Lead security initiatives with End User Services, App Development, and Infra teams.

Skills

Cybersecurity leadership

Risk management

Information security

Cloud security

Regulatory compliance

Vulnerability management

SIEM expertise

Network security

Education

Bachelor’s degree or equivalent IT discipline

Certifications such as CISSP/CISM

Tools

SIEM tools

Firewall technologies

Cloud platforms (AWS/Azure)

Job description

At Builders Mutual, we believe in the power of teamwork to get the job done right. Every day, our team delivers comprehensive commercial insurance and trusted safety solutions to protect and advance the unique needs of the contractor community. Rooted in teamwork, inclusion, expertise, and community, we work together to serve better, achieve more, and build lasting impact.

The OPPORTUNITY:

Leverage your experience and join our team as the Cybersecurity Manager. This position provides the vision and strategies necessary to ensure the confidentiality, integrity, and availability of Builders Mutual electronic information by communicating risk to senior administration, creating, and maintaining enforceable policies and supporting processes, and ensuring compliance with regulatory requirements. The CSM is responsible for creating/maintaining the Cybersecurity Program, leading the Cybersecurity team, establishing an overall security roadmap each year, implementing and monitoring information security standards and policies for BMIC, and aligning security strategy with business goals and objectives. To support these activities, the CSM coordinates activities with other departments, including the evaluation, procurement, and deployment of security-related products and develops and coordinates cyber security awareness and education programs. Additionally, the Cybersecurity Manager ensures a BMIC system-wide incident response plans are in place. Because the success of our company is rooted in teamwork, the way we care about the people we work with and serve, this hybrid role will work in our Raleigh office a minimum of two days with the flexibility to work from home the remaining three days.

Your WORK as the Cybersecurity Manager will make a difference as you:

• Establish and maintain a strategically sound Cybersecurity Program based off internal Risk Analysis to ensure that information assets are adequately protected, including the oversight & coordination of all information security efforts, insuring consistency with regulatory and compliance requirements that govern cyber security for BMIC. This includes, but is not limited to PCI, NAIC, GLBA, SOX, HIPAA, NIST, ISO, ITIL, and Federal/State Directives.
• Define security policies, practices, training programs and standards that govern security functions associated with information technology systems, networks, applications, data communications, and computing services within BMIC – including employee, vendor and customer use and access to information.
• Implement, Monitor and Manage all cloud-related security controls.
• Evaluate, choose, adapt, and drive the implementation of security standards and risk management programs to ensure the integrity, confidentiality, and availability of data.
• Develop effective disaster recovery policies and standards; coordinate the development of implementation plans and procedures to ensure that business-critical services are recovered in the event of a declared disaster and provide direction and in-house consulting in these areas.
• Responsible for identifying, evaluating, and reporting on information security risks, practices, and projects.
• Serve as the process owner of all ongoing activities related to the availability, integrity and confidentiality of customers, vendors, employees, and business information, in compliance with industry directives.
• Lead strategic security planning with End User Services, Application Development, Infrastructure Services teams, and departments within Builders Mutual.
• Work directly with BMIC departments to facilitate IT risk analysis and risk management processes; identify acceptable levels of risk and establish roles and responsibilities about information classification and protection.
• Create and manage information security and risk management training programs for employees, contractors, and approved system users.

Skills and Experience to Get the Job Done Right:

• Bachelor’s degree or equivalent experience in an IT-related discipline plus a minimum of 5 – 7 years’ experience in a combination of risk management, information security and Information Technology positions demonstrating a progressive growth in responsibility (or equivalent combination of education and experience).4+ years' experience as an information security engineer. 1+ years' experience performing penetration testing of network, application, and IT resources.
• Proven experience with current IT security technologies
• Demonstrated experience with information security frameworks
• Demonstrated understanding of technological trends and developments in the areas of information security, risk management, web architectures, and cloud computing
• Demonstrated ability to frame security and risk-related concepts to both technical and nontechnical audiences
• Professional information security certifications such as CompTIA Security+, SSCP, CISSP, CISM, CCNA Security, CCNP Security, CEH, GIAC, or CISA required.
• In-depth knowledge of IT technologies including Cybersecurity best practices, Routing & Switching in LAN/WAN architectures, WLAN, Radius, Firewalls, SSO/SAML, SaaS/Cloud Services, Identity Access Management, SDLC, Microsoft Technologies (Active Directory, IIS, ISA, DNS, SQL), Linux.
• Knowledge and direct experience incorporating ISO 27002, NIST Cybersecurity Framework, and other security control frameworks and standards.
• Knowledge and direct experience with vulnerability management, SIEM and Log Management, file integrity, proxy servers, DLP, IPS/IDS, VPN, PKI, multiple-factor authentication, cryptography.
• Strong analytic and problem-solving skills.
• Strong management and organizational skills.
• Excellent written, verbal communication and presentation skills.

Your Employee Experience at Builders Mutual:

At Builders Mutual, we’re intentional about creating a workplace where people can do meaningful work, feel supported by leaders who care, and grow their careers with confidence. Great workplaces don’t just happen — they’re built with intention. You’ll also be part of a team where people show up as themselves, support one another, and take pride in what we’re building together.

We support you with:

• Competitive compensation and a performance bonus program
• 3 weeks of PTO to start, plus your birthday off
• A 37.5-hour workweek, with Fridays ending at 2:30 PM
• Professional development through Builders University
• Everyday Wins recognition with swag and extra time off
• 8 paid Volunteer Time Off (VTO) hours to give back
• Comprehensive benefits that support your wellbeing today and your future tomorrow