Cybersecurity Manager: Risk, IR & OT Security Lead

Cretex Medical; Elk River (MN); On-site; USD 112,000 - 168,000; Full time

Benefits offered by this job

401k with company match

Onsite health clinics

Discretionary holiday bonus

Cretex University

Employee assistance program

Wellness program

Paid holidays

Paid time off

Profit sharing

Job summary

Cretex Medical is seeking a Cybersecurity Manager to lead the enterprise security program across a growing manufacturing organization. The role combines hands‑on security execution with strategic leadership, driving risk management, incident response, and security architecture from the CIO’s office.

You will expand cybersecurity practices into OT/manufacturing, maintain governance artifacts, and oversee risk, metrics, and vendor partnerships. Occasional travel is required.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or an equivalent combination of education and relevant experience.
• 5+ years of cybersecurity, information security, security engineering, or security operations experience.
• 2+ years of leadership, team lead, project leadership, or people management experience.
• Demonstrated experience leading cybersecurity improvement projects from planning through implementation.
• Strong hands‑on experience with cybersecurity technologies and practices, including endpoint security, vulnerability management, incident response, identity and access management, network security, logging, and security monitoring.
• Experience leading cybersecurity incident response.
• Experience identifying, assessing, and remediating cybersecurity risk.
• Working knowledge of the NIST Cybersecurity Framework.
• Strong communication, problem‑solving, organization, and prioritization skills.
• Ability to respond to significant cybersecurity incidents outside normal business hours.
• Ability to travel periodically between company locations.

Responsibilities

• Own and execute the enterprise cybersecurity maturity roadmap, including prioritizing and leading security improvement initiatives from planning through implementation.
• Maintain the cybersecurity risk register, remediation plans, risk acceptance, and leadership reporting.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Ensure alignment with NIST, CMMC, ITAR, customer security, cyber insurance, and other applicable requirements.
• Develop and report cybersecurity KPIs and KRIs.
• Partner with business and technology leaders to identify and reduce cybersecurity risk.
• Provide hands‑on technical leadership and directly participate in security monitoring, vulnerability management, endpoint security, identity and access management, email security, logging, and network security.
• Serve as the primary cybersecurity incident lead, coordinating investigation, containment, remediation, recovery, post‑incident review, and internal and external response resources.
• Participate in after‑hours response and escalation when significant incidents occur.
• Continuously evaluate security controls, tools, vulnerabilities, and emerging threats.
• Review new systems, applications, infrastructure, cloud services, integrations, and technology projects and establish practical cybersecurity requirements.
• Partner with infrastructure, applications, and business teams to incorporate security into solution design.
• Develop and mature cybersecurity practices for manufacturing and Operational Technology environments, including risk assessment, segmentation, access, monitoring, and incident response.
• Serve as the primary relationship manager for MDR/MSSP providers, security integrators, testing firms, and other cybersecurity partners.
• Manage vendor performance, escalations, service effectiveness, and improvement opportunities.
• Evaluate cybersecurity products and services and recommend cost‑effective solutions.
• Lead, coach, and develop cybersecurity team members, including the IT Security Operations Engineer and Cybersecurity Risk Analyst.
• Establish priorities across security operations, risk, governance, resilience, and awareness.
• Remain actively involved in technical cybersecurity execution while building the capabilities of the cybersecurity team.
• Communicate cybersecurity risks and priorities effectively to technical and non‑technical audiences.

Skills

Leadership

Cybersecurity

Incident response

Risk management

Policy development

NIST framework

Communication

Travel

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

Endpoint security

Vulnerability management

Identity and access management

Network security

Job description

Cretex Medical is seeking a Cybersecurity Manager to lead the enterprise security program across a growing manufacturing organization. The role combines hands‑on security execution with strategic leadership, driving risk management, incident response, and security architecture from the CIO’s office.

You will expand cybersecurity practices into OT/manufacturing, maintain governance artifacts, and oversee risk, metrics, and vendor partnerships. Occasional travel is required.