IT Security Leader: Incident Response & Risk Strategy

Babcock Power; Marlborough (MA); In loco; USD 120.000 - 165.000; Tempo pieno

Descrizione del lavoro

Babcock Power in Marlborough, MA, seeks a Manager of IT Security to lead day‑to‑day security operations and mature the security program in a practical, business‑minded way. You will partner with business and IT leaders to translate cyber risk into actionable priorities, ensuring robust defenses across cloud and on‑premises environments.

The role emphasizes incident response, governance, risk and compliance, and the delivery of new security capabilities.

Competenze

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field preferred or equivalent experience.
• Progressive information security experience including security operations, incident response, risk management, and program delivery.
• Experience leading security professionals and directing work in a dynamic environment.
• Familiarity with governance, risk, and compliance principles and ISO/IEC 27001 / NIST CSF.

Mansioni

• Lead and develop the security team; set priorities, delegate, and hold accountability for outcomes.
• Own security operations model including SLAs, KPIs, and continuous improvement.
• Direct incident response, coordinate stakeholders and executives, and manage post‑incident reviews.
• Oversee threat detection, vulnerability management, and security engineering with cloud and on‑premises systems.

Conoscenze

Security leadership

Incident response

Risk management

Stakeholder management

Communication

Formazione

Bachelor’s degree in CS/IT/Cybersecurity

Strumenti

Microsoft Sentinel

Defender XDR

PowerShell

Microsoft Graph API

KQL

Descrizione del lavoro

Babcock Power in Marlborough, MA, seeks a Manager of IT Security to lead day‑to‑day security operations and mature the security program in a practical, business‑minded way. You will partner with business and IT leaders to translate cyber risk into actionable priorities, ensuring robust defenses across cloud and on‑premises environments.

The role emphasizes incident response, governance, risk and compliance, and the delivery of new security capabilities.