IT Governance & Cybersecurity Manager (Real Estate Investment Firm)

Jobot; Raleigh (NC); On-site; USD 100,000 - 135,000; Full time

Benefits offered by this job

Competitive salary

Company health plan

Generous PTO

Dental & Vision

FSA/HSA

Small team autonomy

Job summary

Jobot is seeking an experienced IT Governance & Cybersecurity Manager for its Raleigh, NC area operations. The role focuses on owning the technology strategy, cybersecurity risk management, and external MSP relationships to safeguard and scale the business.

As the primary technology leader, you will develop governance policies, oversee security controls, and partner with executives to align technology with growth. This is a hands-on, strategic position with strong autonomy.

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity, Information Systems, or related discipline.
• 7+ years in IT operations, governance, cybersecurity, or related functions.
• Experience managing external IT service providers/MSPs or vendors.
• Proven ability to develop or contribute to organizational IT strategy and planning.
• Strong cybersecurity risk management, controls, vulnerability management, and incident response.
• Experience overseeing IT budgets, software licensing, vendor contracts, and IT expenditures.
• Knowledge of cloud-based environments, IAM, endpoint protection, networking, and infrastructure security.
• Ability to evaluate external recommendations and challenge providers when needed.
• Strong communication to present risks, costs, and recommendations to executives.
• Comfortable in a lean org requiring strategic thinking and hands-on coordination.

Responsibilities

• Develop and own the organization's IT strategy and governance framework across the company.
• Establish and maintain IT governance policies, standards, and accountability.
• Create a technology roadmap addressing infra, security, and reliability.
• Serve as the internal technology advisor to executive leadership.
• Assess gaps and inefficiencies and propose improvements.
• Set IT performance indicators and report on spending, security, and initiatives.
• Lead cybersecurity risk management program and coordinate with providers.
• Oversee policies for access management, data protection and cloud security.
• Coordinate risk assessments, vulnerability reviews, and incident response planning.
• Manage MSP/vendor relationships and ensure contracts and SLAs are effective.

Skills

IT governance

Cybersecurity risk management

Vendor management

Strategic IT planning

Cloud security

Leadership

Education

Bachelor's degree in IT, CS, Cybersecurity, IS or related field

Tools

Microsoft 365

Azure

Entra ID

Intune

Job description

IT Governance & Cybersecurity Manager (Real Estate Investment Firm)

$100000 - $135000 per year | Cary, NC | On-site | Permanent

IT Governance & Cybersecurity Manager with the Southeast's TOP Real Estate Investment Firm - On-site - Raleigh, NC

A bit about us:

We are seeking an experienced IT Governance & Cybersecurity Manager to take ownership of our organization's technology strategy, cybersecurity risk management, and external IT service provider relationships.

Our organization operates in a fast-paced, growth-oriented real estate investment environment where technology plays an increasingly important role in operational efficiency, data security, and business continuity.

Rather than maintaining a large internal IT department, we leverage external Managed Service Providers (MSPs) to support our infrastructure, systems, and day-to-day technology needs. We are looking for an internal technology leader who can provide the strategic oversight, accountability, and business judgment necessary to ensure these partnerships are delivering value while protecting the organization from evolving cybersecurity threats.

This is an opportunity for someone who enjoys taking ownership, working directly with executive leadership, and building a technology governance framework that can scale alongside a growing business.

Why join us?

• Competitive Base Salary
• Company paid health plan for employees
• Very generous PTO
• Dental and Vision, FSA, HSA
• Small team, autonomy
• Many more great perks!

Job Details

Key Responsibilities

IT Strategy & Technology Governance

Own and develop the organization's overall IT strategy, ensuring technology investments align with business objectives, operational needs, and long-term growth.

Establish and maintain IT governance policies, standards, procedures, and accountability across the organization.

Develop and manage a technology roadmap that addresses infrastructure, security, system reliability, and future business requirements.

Serve as the primary internal technology advisor to executive leadership, translating technical risks, opportunities, and recommendations into practical business decisions.

Evaluate existing technology systems, identify gaps and inefficiencies, and recommend improvements.

Establish measurable IT performance indicators and regularly report on technology spending, security posture, vendor performance, and strategic initiatives.

Cybersecurity & Risk Management

Own the organization's cybersecurity risk management program, including identifying, assessing, prioritizing, and monitoring technology-related risks.

Work closely with external IT and cybersecurity providers to ensure appropriate security controls, monitoring, and protective measures are implemented.

Oversee cybersecurity policies and practices related to access management, identity protection, endpoint security, data protection, and cloud environments.

Coordinate periodic cybersecurity risk assessments, vulnerability assessments, and third-party security reviews.

Develop and maintain incident response, disaster recovery, and business continuity plans in collaboration with external providers.

Evaluate cybersecurity insurance requirements, security-related vendor obligations, and applicable regulatory considerations.

Ensure security risks are appropriately documented, communicated to leadership, and addressed through defined remediation plans.

Establish employee cybersecurity awareness and training initiatives.

Managed Service Provider (MSP) & Vendor Management

Serve as the primary point of accountability for all outsourced IT service providers, cybersecurity partners, and technology vendors.

Manage MSP relationships, including contracts, service-level agreements, performance expectations, and escalation procedures.

Regularly assess vendor performance, responsiveness, service quality, and alignment with business needs.

Review MSP recommendations, proposed infrastructure changes, security solutions, and technology purchases to ensure they are technically appropriate and financially justified.

Identify opportunities to consolidate vendors, renegotiate contracts, improve service delivery, and reduce unnecessary technology spending.

Ensure external providers maintain appropriate documentation, security practices, and operational continuity.

IT Budgeting & Cost Optimization

Develop, manage, and monitor the organization's annual IT budget.

Analyze technology expenditures, including software licensing, cloud services, managed services, cybersecurity tools, and infrastructure.

Identify redundant systems, unnecessary subscriptions, and opportunities for cost savings.

Evaluate the financial impact and return on investment of proposed technology initiatives.

Partner with Finance and executive leadership on technology forecasting, vendor negotiations, and capital expenditure planning.

Establish reporting that provides leadership with visibility into technology costs, risks, and performance.

Technology Operations & Business Support

Provide oversight of the organization's technology environment, including cloud platforms, business applications, networking, endpoints, and identity management.

Ensure MSPs are effectively supporting employees and resolving technology issues within established service expectations.

Coordinate technology needs associated with company growth, office expansions, acquisitions, and organizational changes.

Partner with internal stakeholders to evaluate new software platforms, integrations, and business technology requirements.

Support internal automation initiatives by ensuring proposed solutions meet the organization's security, infrastructure, and governance standards.

Maintain oversight of critical system documentation, vendor access, technology assets, and software licensing.

Required Qualifications

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related discipline, or equivalent professional experience.

7+ years of progressive experience in IT operations, infrastructure management, IT governance, cybersecurity, or related technology functions.

Experience managing external IT service providers, MSPs, technology vendors, or outsourced infrastructure environments.

Demonstrated experience developing or contributing significantly to organizational IT strategy and technology planning.

Strong understanding of cybersecurity risk management, security controls, vulnerability management, and incident response.

Experience overseeing technology budgets, software licensing, vendor contracts, and IT-related expenditures.

Working knowledge of cloud-based business environments, identity and access management, endpoint protection, networking, and infrastructure security.

Ability to independently evaluate technical recommendations and challenge external providers when necessary.

Strong communication skills with the ability to present technology risks, costs, and recommendations to nontechnical executive leadership.

Comfortable working in a lean organization where the position requires both strategic thinking and hands-on coordination.

Preferred Qualifications

Experience in real estate investment, private equity, financial services, property management, or another data-sensitive business environment.

Familiarity with cybersecurity frameworks such as NIST Cybersecurity Framework, CIS Controls, or ISO 27001.

Experience with Microsoft 365, Microsoft Entra ID, Azure, Intune, or similar enterprise technology environments.

Experience with cybersecurity insurance assessments, third-party risk reviews, and vendor security evaluations.

Relevant certifications such as CISSP, CISM, CRISC, CISA, Security+, or ITIL.

Experience supporting organizations through periods of rapid growth, acquisitions, or operational expansion.

Familiarity with evaluating the security and governance implications of AI-enabled business applications and automation platforms.

What Success Looks Like

First 90 Days: Establish a clear understanding of the existing technology environment, MSP relationships, security controls, contracts, and IT spending. Identify immediate cybersecurity risks, service gaps, and opportunities for improvement.

First 6 Months: Implement a structured vendor management process, establish regular cybersecurity risk reporting, improve visibility into IT spending, and present a prioritized technology roadmap to executive leadership.

First 12 Months: Establish a sustainable IT governance framework, improve accountability across external providers, reduce unnecessary technology expenses, and ensure the organization has a clear cybersecurity and technology strategy supporting continued growth.

Jobot is an Equal Opportunity Employer

We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot’s policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions.

Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance.