IT Cyber Security Manager

Confidential; Houston (TX); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Hybrid work flexibility

On-site HQ

Job summary

Confidential's IT Security team seeks an IT Cybersecurity Manager responsible for end-to-end security across IT and OT environments, balancing hands-on incident work with strategic planning. You will oversee Entra ID, Microsoft 365 security, data loss prevention, and SIEM operations, while coordinating third‑party risk, audits, and security assessments.

Office-based at HQ with hybrid flexibility and periodic manufacturing-floor visits; lead phishing simulations and security-awareness training to

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems or related field (or equivalent experience).
• 8+ years in IT, with 5+ years in cybersecurity roles.
• 2+ years leading people, projects, or a security function.
• Hands-on experience with Microsoft security stack: Defender, Entra ID, Intune, Purview, Sentinel or a comparable SIEM.

Responsibilities

• Own the cybersecurity strategy and roadmap aligned to NIST CSF 2.0/ISO 27001 and CIS Controls.
• Lead security operations including detection and response across endpoints, identity, email, network, and cloud.
• Govern Entra ID, MFA, conditional access, and access reviews; secure Microsoft 365, SharePoint, Teams, and Azure workloads.
• Coordinate OT/ICS security in manufacturing sites; lead third-party risk reviews and SOX ITGC support.
• Run security training, phishing simulations, and awareness programs; manage security staff and incident response activities.

Skills

Leadership

Strategic planning

Risk communication

Security operations oversight

Team management

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems

Tools

Microsoft Defender

Entra ID

Intune

Purview

Sentinel or SIEM

Job description

The IT Cybersecurity Manager owns Company's security program end to end: strategy, operations, risk, and compliance. The role protects the company’s global information technology, cloud and Microsoft 365 environments, and the operational technology (OT) that runs our manufacturing and service facilities.

This leader builds and runs a small security team and reports security posture to the VP of IT. The ideal candidate is hands-on enough to investigate an incident and strategic enough to run an annual roadmap.

Key responsibilities

Program and strategy

• Own the cybersecurity strategy and roadmap aligned to NIST CSF 2.0/ISO 27001 and CIS Controls
• Maintain security policies, standards, and procedures; run annual review and employee attestation
• Report risk posture, metrics, and program status to IT leadership

Security operations

• Lead detection and response across endpoint, identity, email, network, and cloud (SentinelOne, or equivalent SIEM/XDR)
• Manage the MSSP/MDR relationship, SLAs, and escalation paths
• Plan vulnerability management and patch compliance with IT infrastructure teams

Identity and cloud security

• Govern Entra ID: MFA, conditional access, privileged access, and access reviews
• Secure Microsoft 365, SharePoint, Teams, and Azure workloads, including data loss prevention and sensitivity labels

OT and manufacturing security

• Assess and segment OT/ICS networks at manufacturing sites in partnership with Operations

Risk, compliance, and third parties

• Lead security support for SOX IT general controls and 3rd party security questionnaires
• Run third-party risk reviews for vendors and SaaS applications
• Coordinate annual penetration testing and quarterly internal security assessments and track remediation to closure

People and awareness

• Manage security staff
• Run phishing simulation and security awareness training for all employees

Required qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field — or equivalent experience
• 8+ years in IT, with 5+ years in cybersecurity roles
• 2+ years leading people, projects, or a security function are preferred
• Hands-on experience with Microsoft security stack: Defender, Entra ID, Intune, Purview, Sentinel or a comparable SIEM
• Working knowledge of NIST CSF, ISO CSF, CIS Controls, and incident response frameworks
• Experience leading incident response from detection through recovery and lessons learned
• Ability to explain technical risk in business terms to IT leadership

Preferred qualifications

• Certifications: CISSP or CISM (strongly preferred); GICSP or GRID for OT; Microsoft SC-100 or SC-200 are preferred
• Experience in manufacturing, oil and gas, or energy services
• OT/ICS security experience, including network segmentation and secure remote access
• Experience supporting SOX ITGC audits and customer security assessments
• Experience securing a multi-site or international footprint
• Scripting or automation skills (PowerShell, KQL, Python)

What success looks like

90 days: Current-state assessment against NIST CSF 2.0 delivered; top 10 risks ranked with owners; incident response plan reviewed and tested

6 months: 12–18-month security roadmap; MFA and conditional access enforced for all users and admins

12 months: Measurable reduction in critical vulnerabilities and phishing click rate; clean ITGC security findings

Work environment:

Office-based at HQ with hybrid flexibility. Periodic visits to manufacturing floors. On-call participation for critical security incidents.