Cybersecurity Manager — Strategy, Risk & Incident Response

WORCESTER CITY OFC-WATER; Worcester (MA); On-site; USD 100,036 - 132,137; Full time

Job summary

City of Worcester is seeking a Cybersecurity Manager to lead the DoIT cybersecurity program, supervise the security team, and align strategy with industry standards across enterprise IT, cloud, and public safety systems.

The role requires hands-on leadership, risk assessment oversight, and collaboration with city executives to strengthen posture and ensure regulatory compliance in a hybrid environment.

Qualifications

• Bachelor’s degree in cybersecurity, CS, IT, or related field, or equivalent experience with seven years in lieu.
• Five years of progressive cybersecurity or information security experience with security operations, incident response, and risk management.
• Two years of supervisory experience overseeing security operations in large-scale environments.
• Experience with Zero Trust tools (e.g., Zscaler), SIEM, EDR/XDR, IDS/IPS, SSE, IAM, and vulnerability tools.
• Strong technical skills in firewalls, VPNs, IDS/IPS, identity management, endpoint security, and DLP.

Responsibilities

• Develop and maintain the City’s cybersecurity strategy in alignment with standards and municipal needs.
• Serve as the City’s primary cybersecurity advisor to DoIT leadership and City executives.
• Establish, update, and enforce cybersecurity policies, standards, and procedures.
• Oversee governance activities, including risk assessments, compliance initiatives, and long-term planning.
• Coordinate Incident Response, Business Continuity, and Disaster Recovery planning and exercises.
• Lead security incident investigations and coordinate response with IT, legal, and partners.

Skills

Leadership

Risk management

Policy enforcement

Communication

Incident response

Threat assessment

Team management

Strategic planning

Cloud security

Education

Bachelor’s degree in cybersecurity, CS, IT or related field

Tools

Zero Trust tools (Zscaler)

SIEM

EDR/XDR

IDS/IPS

IAM

Vulnerability scanning

Job description

City of Worcester is seeking a Cybersecurity Manager to lead the DoIT cybersecurity program, supervise the security team, and align strategy with industry standards across enterprise IT, cloud, and public safety systems.

The role requires hands-on leadership, risk assessment oversight, and collaboration with city executives to strengthen posture and ensure regulatory compliance in a hybrid environment.