Cybersecurity Leader — Hybrid Public Sector IT Security

City-and-County-of-Broomfield; Colorado; Hybrid; USD 132,000 - 179,000; Full time

Benefits offered by this job

Free Recreation Center Pass (Gym &Pool

6% employer retirement match

Medical, dental, & vision insurance

19 days paid vacation + 10 sick days +

12 holidays per year

Wellness discount on insurance premium

Job summary

City and County of Broomfield is seeking an experienced IT Security Manager to lead and advance our enterprise cybersecurity program. This role shapes the organization's cyber strategy, strengthens security posture, and manages risk across hybrid and multi-cloud environments that support essential public services.

You will oversee incident response, third‑party risk, and regulatory compliance with NIST CSF 2.0, CJIS, PCI-DSS and HIPAA, while guiding a diverse team, driving security awareness,

Qualifications

• Minimum 6 years in cybersecurity with at least 2 years in supervisory roles.
• Experience securing hybrid/cloud environments (SaaS, IaaS, PaaS).
• Familiarity with NIST CSF, CJIS, PCI-DSS, HIPAA in public sector.
• Strong governance, policy development, and vendor risk management.

Responsibilities

• Lead cross-functional cybersecurity team with annual performance plans.
• Oversee enterprise risk management for multi-cloud and hybrid infrastructure.
• Develop and enforce security policies and standards.
• Coordinate incident response and tabletop exercises.
• Drive security awareness and training for city staff.

Skills

Cybersecurity leadership

Threat hunting

Risk assessment

Regulatory compliance

Cloud security

Team leadership

Education

Bachelor's degree in cybersecurity or related field

Vocational training in information security and cloud computing

CISM/CISSP/CISA or equivalent certification

CCSP / GIAC / CompTIA Security+ certifications

ITIL Foundation certification

Tools

Active Directory

Microsoft Entra ID (Azure AD)

Job description

City and County of Broomfield is seeking an experienced IT Security Manager to lead and advance our enterprise cybersecurity program. This role shapes the organization's cyber strategy, strengthens security posture, and manages risk across hybrid and multi-cloud environments that support essential public services.

You will oversee incident response, third‑party risk, and regulatory compliance with NIST CSF 2.0, CJIS, PCI-DSS and HIPAA, while guiding a diverse team, driving security awareness,