Onsite Cybersecurity & Compliance Leader

Garan Incorporated; Starkville (MS); Sur place; USD 120 000 - 160 000; Plein temps

Résumé du poste

Garan, Incorporated in Starkville, Mississippi, is seeking a Cybersecurity & IT Compliance Manager to strengthen daily security operations and the compliance program. This hands-on role focuses on security controls, threat response, audits, risk assessments, and vendor security, reporting to the Head of Cybersecurity.

You will work with IT teams, stakeholders, auditors, and Berkshire Hathaway resources to improve the company’s security posture and effectively communicate risks to executives.

Qualifications

• Bachelor’s degree or equivalent professional experience in cybersecurity, information technology, computer science, or related field.
• 5+ years of progressive experience in cybersecurity, information security, or a closely related field.
• Strong working knowledge of IAM, endpoint security, cloud security, network security, vulnerability management, and incident response.
• Hands-on experience with Microsoft 365 security, Entra ID, Defender, Intune, Conditional Access, and multifactor authentication.
• Experience supporting cybersecurity audits, compliance requirements, risk assessments, control testing, and remediation activities.
• Knowledge of NIST CSF and CIS Controls.

Responsabilités

• Support daily cybersecurity operations and serve as a technical escalation resource for cybersecurity matters.
• Implement, maintain, assess, and continuously improve security controls across identity, endpoints, cloud services, networks, applications, data, and enterprise systems.
• Administer and strengthen Microsoft security technologies, including Microsoft 365, Entra ID, Defender, Intune, Conditional Access, multifactor authentication, and privileged access controls.
• Monitor and investigate cybersecurity threats and coordinate incident response, containment, remediation, documentation, and lessons learned.
• Coordinate vulnerability-management activities, including identification, risk-based prioritization, remediation tracking, exception management, and reporting.
• Support internal and external cybersecurity audits through evidence collection, control validation, issue remediation, and compliance tracking.
• Conduct cybersecurity risk assessments and maintain records of identified risks, corrective actions, owners, and target completion dates.
• Evaluate cybersecurity risks related to vendors, cloud services, new technologies, system implementations, and significant technology changes.
• Maintain cybersecurity policies, standards, procedures, control documentation, and supporting evidence.
• Coordinate cybersecurity awareness and training activities.
• Work with cybersecurity vendors, consultants, and SOC/MDR service providers to support effective service delivery.
• Track and report cybersecurity metrics, projects, vulnerabilities, risks, audit findings, and remediation activities.
• Communicate cybersecurity risks, incidents, and initiatives to executive management and nontechnical stakeholders in clear business terms.
• Partner across IT and the business to complete cybersecurity projects and improve Garan’s overall security posture.

Connaissances

Identity & Access Management

Endpoint Security

Cloud Security

Vulnerability Management

Incident Response

Microsoft 365 Security

Entra ID

Defender

Intune

Zero Trust

Formation

Bachelor’s degree in cybersecurity, information technology, computer science, or related field

Equivalent professional experience

Outils

SIEM

EDR/XDR

Privileged Access Management

Description du poste

Garan, Incorporated in Starkville, Mississippi, is seeking a Cybersecurity & IT Compliance Manager to strengthen daily security operations and the compliance program. This hands-on role focuses on security controls, threat response, audits, risk assessments, and vendor security, reporting to the Head of Cybersecurity.

You will work with IT teams, stakeholders, auditors, and Berkshire Hathaway resources to improve the company’s security posture and effectively communicate risks to executives.