Hybrid Information Security Manager - Lead Security

Rezult Group; Birmingham (AL); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Rezult Group in Birmingham, AL, is seeking an Information Security Manager to drive security strategy across multiple companies. This hybrid, full-time role requires guiding risk assessments, audits, and remediation aligned with NIST/CMMC, and owning security projects end-to-end.

You will mentor cybersecurity engineers, oversee MSSPs, manage incident response and threat detection in Microsoft environments (Entra ID, Defender, Intune, M365), and coordinate third-party risk and cyber insurance

Qualifications

• 5+ years IT experience, 3+ in information security, 1+ in supervision.
• Experience translating risk to business terms and influencing leaders.
• Strong communication and cross-team collaboration.

Responsibilities

• Drive day-to-day security strategy across a family of companies.
• Lead risk assessments, audits, remediation tracking; map to NIST/CMMC.
• Own security projects from scoping to delivery, manage timelines/resources.
• Mentor a small cybersecurity team; oversee MSSPs against SLAs.
• Lead incident response, vulnerability management, threat detection; fortify MS environment.
• Oversee third-party risk and security questionnaires; align with cyber insurance and data governance.
• Build executive buy-in for security initiatives and funding.

Skills

NIST 800-53

CMMC

ISO 27001

CISSP/CISM/CRISC

Security leadership

Project management

Tools

SIEM

EDR

IAM

Vulnerability management

Microsoft 365 security

MSSP management

Job description

Rezult Group in Birmingham, AL, is seeking an Information Security Manager to drive security strategy across multiple companies. This hybrid, full-time role requires guiding risk assessments, audits, and remediation aligned with NIST/CMMC, and owning security projects end-to-end.

You will mentor cybersecurity engineers, oversee MSSPs, manage incident response and threat detection in Microsoft environments (Entra ID, Defender, Intune, M365), and coordinate third-party risk and cyber insurance