Cybersecurity Manager (IT Manager II)

State Bar of California; San Francisco (CA); On-site; USD 136,000 - 181,000; Full time

Job summary

The State Bar of California is seeking a Cybersecurity & Infrastructure Manager to lead the cybersecurity program and protect a hybrid technology environment across Los Angeles and San Francisco. You will manage security monitoring, incident response, vulnerability management, and security policy, while guiding a team of technical specialists and coordinating with infrastructure, cloud, applications, and end-user support teams.

This role reports to senior leadership on risk and operations.

Qualifications

• Bachelor's degree in computer science, cybersecurity, or related field (or equivalent experience).
• Minimum of five (5) years of experience in IT security, including three (3) years of supervisory or team-lead experience.
• Experience with IT infrastructure operations is highly desirable.
• Professional certifications such as CISSP or equivalent are a plus but not required.

Responsibilities

• Lead cybersecurity program including security monitoring, incident response, vulnerability management, and security policy.
• Oversee infrastructure services to support a secure and resilient environment.
• Manage a team of technical specialists and vendors.
• Partner with Infrastructure and Cloud, Applications, and end-user support teams to integrate security across operations.
• Report cybersecurity risk and operational status to senior leadership.

Skills

Cybersecurity leadership

Incident response

Security monitoring

Collaboration

Education

Bachelor's degree in computer science or cybersecurity

Job description

Annual Salary Range IT Manager II: $135,696 - $180,902

FLSA Exempt

About the Office

The Office of Information Technology (IT) is responsible for enabling State Bar's internal and external stakeholders by the management, implementation, and maintenance of an organization's technology to support of State Bar's mission and goals. The office's primary goals are to build and maintain functional capabilities, to support innovation and to ensure that all systems are running smoothly, efficiently, and securely to support the needs of the organization and its stakeholders.

About the Role

The Cybersecurity & Infrastructure Manager serves as the State Bar's lead cybersecurity manager, providing strategic leadership and hands-on technical expertise to protect the State Bar's hybrid technology environment, including its data centers in Los Angeles and San Francisco. This position leads the cybersecurity program, including security monitoring, incident response, vulnerability management, and security policy, and oversees assigned infrastructure services that support a secure and resilient technology environment.

The manager leads a team of technical specialists, manages security and infrastructure vendors, and partners closely with the Infrastructure and Cloud, Applications, and end-user support teams to integrate security across operations. This role reports on cybersecurity risk and operational status to senior leadership.

The Ideal Candidate

The ideal candidate is a strategic and technical leader responsible for managing an organization's cybersecurity efforts. They excel in implementing and maintaining robust security measures to protect IT infrastructure, systems, and data. With strong collaboration skills, they work with internal teams and external partners to integrate security across operations, enhance cybersecurity visibility through dashboards, and automate security monitoring and incident response workflows. They also bring hands-on experience with core infrastructure operations and are comfortable leading both security and operational teams.

Minimum Qualifications

Education

• Bachelor's degree in computer science, Cybersecurity, or a related field (or equivalent experience).

Experience

• Minimum of five (5) years of experience in IT security, including three (3) years of supervisory or team-lead experience. Experience with IT infrastructure operations is highly desirable.

Certifications

• Professional certifications such as CISSP or equivalent are a plus but not required.