Cybersecurity IT Manager

Oklahoma-State-University; Stillwater (OK); On-site; USD 70,000 - 97,000; Full time

Job summary

Oklahoma State University—OSU-Stillwater is seeking a Cybersecurity IT Manager to lead enterprise technology services and oversee cybersecurity operations. You will ensure alignment with system goals and compliance, while directing staff and vendor-supported services.

The role requires strong leadership, risk-informed decision making, and collaboration across IT environments to strengthen institutional resilience and response to major cybersecurity events.

Qualifications

• Bachelor's degree conferred on start date and five years of IT/cybersecurity experience.
• Experience leading teams and coordinating complex technical work.
• Ability to balance risk, operations, and strategic priorities.
• Post-secondary education can substitute for some experience.

Responsibilities

• Provide leadership and oversight for enterprise technology services.
• Lead cybersecurity professionals and vendor-supported services.
• Advise leadership on risk, priorities, and strategic cybersecurity initiatives.
• Promote consistent cybersecurity practices across central and distributed IT.

Skills

Team leadership

Cybersecurity risk

Communication skills

Decision making

Incident response

Strategic planning

Education

Bachelor's degree (information technology or related)

Five years of progressive IT/cybersecurity experience

Master's degree in related field (preferred)

Cybersecurity certifications (CISSP, CISA, GIAC, etc.)

Tools

Security frameworks (NIST, etc.)

Job description

Campus

OSU-Stillwater

Contact Name & Email

Marjorie McLagan, [e-mail]

Work Schedule

Monday through Friday, 8:00am-5:00pm with occasional evenings and weekends.

Appointment Length

Regular Continuous/Until Further Notice

Hiring Range

$70,000 - $97,000

Salary

About this Position

The Cybersecurity IT Manager provides leadership and operational oversight for enterprise technology services, ensuring alignment with OSU/A&M System goals, compliance requirements, and departmental priorities. This position is accountable for service delivery, staff performance, and continuous improvement within the assigned domain.

The Manager exercises significant independent judgment and decision-making authority, oversees cybersecurity professionals and vendor-supported services, monitors service health and performance, and advises EIT leadership on cybersecurity risk, operational priorities, resource needs, and strategic initiatives. The position works across central and distributed IT environments to promote consistent cybersecurity practices, institutional resilience, and effective response to significant cybersecurity events.

Required Qualifications

• Bachelor's degree (degree must be conferred on or before agreed upon start date) and five (5) years of progressively responsible experience in an information technology-related field, including cybersecurity, information security operations, systems administration, networking, enterprise platforms, cloud services, risk management, or similar technical domains.

• Experience must include responsibility supporting enterprise-scale IT or cybersecurity environments and demonstrated responsibility leading the work of others, coordinating complex technical or operational activities, or providing formal supervisory leadership.

• Demonstrated experience establishing priorities, coordinating resources, managing escalations, and supporting team or service outcomes in a complex environment.

• Post-secondary education may substitute for years of required experience.

Skills, Proficiencies, and/or Knowledge

• Demonstrated ability to lead employees or teams, establish priorities, coordinate resources, manage escalations, and maintain accountability for service or operational outcomes.
• Strong verbal and written communication skills, including the ability to communicate cybersecurity risk, service performance, findings, and recommendations to technical, non-technical, and leadership audiences.
• Advanced analytical, critical-thinking, and problem-solving skills with the ability to make sound, risk-informed decisions in high-pressure or time-sensitive situations.
• Demonstrated discretion, professionalism, accountability, and sound judgment when handling sensitive or confidential information.
• Working knowledge of enterprise cybersecurity controls, incident management, vulnerability management, risk mitigation practices, and cybersecurity frameworks.
• Ability to develop employees, address performance expectations, and foster effective collaboration across organizational boundaries.

Preferred Qualifications

• Master's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, Business, or a closely related field.
• Three (3) years of progressively responsible experience in an information technology-related field, including cybersecurity, information security operations, systems administration, networking, enterprise platforms, cloud services, risk management, or similar technical domains.
  • Progressive experience supervising or leading cybersecurity professionals and managing enterprise cybersecurity services in a complex, distributed organization such as higher education, research, healthcare, or the public sector.
  • Experience managing or coordinating incident response, vulnerability management, security operations, risk assessments, cybersecurity service delivery, vendor-supported services, or program maturity initiatives.
  • Experience using cybersecurity and service performance metrics to establish priorities, assess service effectiveness, and support management decision-making.

Certifications, Registrations, and/or Licenses

• CISSP, CISA, GIAC or other SANS-affiliated cybersecurity certifications, CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or other industry-recognized cybersecurity or IT service management certifications.

Skills, Proficiencies, and/or Knowledge

• Strong people leadership, coaching, performance management, and organizational skills.
• Ability to balance cybersecurity risk, operational continuity, service performance, staffing needs, and institutional priorities.
• Demonstrated ability to provide executive-ready analysis and recommendations regarding cybersecurity risk, service health, resource needs, and strategic priorities.
• Strong working knowledge of enterprise security controls, threat mitigation, incident management, vulnerability management, risk management, and frameworks such as the NIST Cybersecurity Framework.
• Familiarity with service management concepts such as service ownership, performance metrics, service level expectations, vendor management, and continuous improvement.