Senior Enterprise Cybersecurity Leader – Strategy & Risk

Orange County Transportation Authority; Orange (CA); On-site; USD 173,000 - 238,000; Full time

Job summary

Orange County Transportation Authority seeks a Department Manager – Enterprise Cybersecurity to lead OCTA’s cybersecurity program across cloud, on-premises, and operational tech. You will guide governance, risk management, and security operations to protect critical infrastructure and mobility services.

The role requires eight years of cybersecurity experience with management experience, a relevant degree, and a mandatory security certification.

Qualifications

• Eight years of cybersecurity experience in business environments.
• At least four years in a cybersecurity management position.
• Hands-on experience with network security services and technologies.
• Experience leading enterprise cybersecurity governance, risk management, security operations, and incident response.
• Knowledge of data privacy, data classification, and data loss prevention principles.

Responsibilities

• Establish and lead OCTA’s enterprise cybersecurity strategy, governance framework, policies, standards, performance objectives, and multi-year roadmap.
• Direct cybersecurity risk management across cloud and on-premises environments, enterprise networks, IAM, and critical infrastructure.
• Advise the CIO and executive leadership on cybersecurity posture, material risks, and strategic investments.
• Lead cybersecurity incident readiness and response, including command, communications, and exercises.
• Establish risk-based vulnerability management, privileged-access, and least-privilege practices.
• Lead Data Privacy and Data Classification Program, including sensitive-data discovery and data protection.
• Establish governance for AI and emerging technologies with safeguards.
• Direct third-party and supply-chain cybersecurity risk management and remediation.

Skills

Enterprise cybersecurity strategy

Governance & risk management

Incident response leadership

Secure cloud & AI awareness

Vendor risk management

Education

Bachelor’s degree or equivalent

Advanced degree preferred

Security certification (CISM/CISSP/CISA/GSNA/GSAE) required

Job description

Orange County Transportation Authority seeks a Department Manager – Enterprise Cybersecurity to lead OCTA’s cybersecurity program across cloud, on-premises, and operational tech. You will guide governance, risk management, and security operations to protect critical infrastructure and mobility services.

The role requires eight years of cybersecurity experience with management experience, a relevant degree, and a mandatory security certification.