Cybersecurity Manager

Worcester Public Library; Worcester (MA); Ibrido; USD 120.000 - 170.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work environment

Professional development

Descrizione del lavoro

The City of Worcester is seeking a Cybersecurity Manager to establish and sustain the city’s cybersecurity strategy across enterprise IT, cloud platforms, and public safety tech. You will supervise the Cybersecurity Analyst and Trainer, collaborate with leadership, and drive best-practice security controls.

Open to bilingual applicants, with on-site attendance required. The role emphasizes risk management, regulatory compliance, and cross‑department collaboration to strengthen the city's

Competenze

• Bachelor's degree in cybersecurity, CS, IT, or related field.
• 7+ years of progressive cybersecurity or information security experience, including security operations, incident response, and risk management.

Mansioni

• Develop and implement the City of Worcester's cybersecurity strategy.
• Oversee daily security operations and staff in a hybrid environment.
• Lead security policy development, standards, and procedures.
• Coordinate incident response, security investigations, and audits.

Conoscenze

Security leadership

Risk management

Cloud security

Zero Trust

SIEM/EDR

Policy development

Incident response

CJIS security

Compliance frameworks

Network security

Team mentoring

Communication skills

Formazione

Bachelor's degree in cybersecurity/CS/IT

7+ years cybersecurity experience

Strumenti

Zscaler

SIEM

EDR/XDR

IDS/IPS

IAM

Vulnerability scanning

Firewalls

VPNs

Cloud platforms

Descrizione del lavoro

The City of Worcester is seeking qualified applicants for a Cybersecurity Manager in the Department of Innovation and Technology. Under the direction of the Chief Information Officer, this position is responsible for establishing the City of Worcester’s cybersecurity strategy, performing hands‑on daily security operations, and ensuring the protection of information systems supporting employees across a hybrid environment that includes enterprise IT, cloud platforms, and public safety operational technologies. This role requires both strategic oversight and direct, hands on engagement with security platforms, the security team, and the broader organization to implement and sustain best practice processes, procedures, and supporting technologies.

The Cybersecurity Manager supervises the Cybersecurity Analyst and Cybersecurity Trainer. This position collaborates with City leadership, departmental stakeholders, and external partners to strengthen the City’s cybersecurity posture and maintain compliance with regulatory and policy requirements.

Bilingual applicants are encouraged to apply.

Required Knowledge, Skills, and Abilities:

• Deep understanding of security principles, access control models, and risk management.
• Strong knowledge of IT infrastructure, cloud computing, hybrid environments, and enterprise systems.
• Ability to influence organizational change, build morale, and foster a strong security culture.
• Strong leadership, team management, mentoring, and staff development skills.
• Commitment to continuous improvement of processes, controls, and team efficiency.
• Excellent written and verbal communication skills, including translating complex topics for non technical audiences.
• Ability to prioritize and execute tasks in high pressure or time sensitive environments.
• Strong analytical, problem solving, and decision making abilities.
• Experience developing and maintaining security policies, standards, and procedures.
• Experience with business continuity, disaster recovery planning, incident response, and security investigations.
• Strong interpersonal communication, organizational, and customer service skills.
• Strong communication, collaboration, and cross‑department partnership skills.
• Strong attention to detail and analytical abilities.
• Regular onsite attendance is required.
• Bachelor’s degree in cybersecurity, computer science, information technology, or a related field; or
  • Any equivalent combination of education, training and seven (7) years of experience which provide the required knowledge, skills and abilities to perform the required duties of the position will be considered in lieu of the above-mentioned requirements.
• Five (5) years of progressive cybersecurity or information security experience, including responsibility for security operations, incident response, and risk management.
• Two (2) years of supervisory or team lead experience, including managing security operations in large scale or complex environments.
• Experience with Zero Trust tools (e.g., Zscaler), SIEM, EDR/XDR, IDS/IPS, Secure Service Edge, IAM, and vulnerability scanning/detection tools.
• Strong technical skills in firewalls, VPNs, IDS/IPS, identity management, endpoint security, and Data Loss Prevention strategies.
• Experience securing multiple operating systems (Windows Server/client, Linux, Solaris) and virtualization technologies.
• Strong knowledge of network environments, routers, switches, network protocols (TCP/IP), and general enterprise network infrastructure.
• Experience with enterprise security architecture, incident response, vulnerability management, and risk based security practices.
• Knowledge of regulatory and compliance frameworks (PCI, HIPAA, NIST, FIPS 140 2, GDPR, CCPA) and experience supporting compliance efforts.
• Experience managing security in modern cloud environments (Azure, AWS, SaaS, PaaS, IaaS) and M365/Azure security administration.
• Experience managing or supporting security audits.
• At least one relevant certification (e.g., Security+, GSEC, MCSA: Security, CISSP or Associate).
• Valid driver’s license and access to reliable transportation.
• Ability to obtain and maintain CJIS certification; must be CJIS eligible.

Preferred Requirements:

• Eight (8) years of professional cybersecurity experience with progression into leadership roles.
• Experience with public‑sector, municipal, or regulated environments, including familiarity with CJIS, HIPAA, MA 201 CMR 17.00, or similar regulations.
• Experience securing critical infrastructure or OT/SCADA environments.
• Working knowledge of operating systems and commercial applications commonly used in municipal environments.
• Experience leading cybersecurity strategy aligned with NIST, CIS, or ISO 27001.

OPEN UNTIL FILLED, applications received prior to or on FRIDAY, NOVEMBER 13, 2026, will receive preference. Preference is given to Worcester residents. The City of Worcester is an equal opportunity, affirmative action employer. Women, minorities, people with disabilities and protected veterans are encouraged to apply.