Cybersecurity Lead: Build & Elevate the Security Program

NYCOR; Plymouth (MN); On-site; USD 110,000 - 150,000; Full time

Job summary

NYCOR in Minnesota seeks a Cybersecurity Analyst Lead to establish and mature the security program across the organization. You will work hands-on in the technology environment, turning risk assessments into practical improvements, prioritizing actions, and reporting progress to leadership.

The role requires four+ years in information security, strong incident response, vulnerability management, and IAM expertise, with familiarity to NIST CSF, SP 800-171, and related controls.

Qualifications

• At least four years of meaningful hands-on information security experience.
• Ability to translate risk into prioritized, practical actions.
• Experience explaining cyber risk to technology and business leaders.
• Familiarity with NIST CSF, NIST SP 800-171, CIS Controls, or ISO 27001.

Responsibilities

• Operate and continually improve safeguards protecting people, systems, and data.
• Lead risk-based vulnerability management and remediation tracking.
• Oversee endpoints, cloud services, identity controls, and logging/SIEM.
• Develop and implement cybersecurity policies, standards, and governance.
• Coordinate with Technology teams to reduce risk while enabling operations.
• Prepare concise reporting on cyber risk and program progress for leadership.

Skills

Incident response

Vulnerability management

Endpoint protection

Identity & access management

Microsoft security

Cloud security

Logging & SIEM

Network security

Secure configuration

Tools

SIEM

EDR

Microsoft security tools

Cloud security tooling

Job description

NYCOR in Minnesota seeks a Cybersecurity Analyst Lead to establish and mature the security program across the organization. You will work hands-on in the technology environment, turning risk assessments into practical improvements, prioritizing actions, and reporting progress to leadership.

The role requires four+ years in information security, strong incident response, vulnerability management, and IAM expertise, with familiarity to NIST CSF, SP 800-171, and related controls.