Sr. Cybersecurity Manager

ACCO Brands; Lake Zurich (IL); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Comprehensive medical plans

4% 401(k) match

Generous time off

Parental leave

Company-paid life and disability

Job summary

ACCO Brands seeks a dynamic Sr. Cybersecurity Manager to lead a global team of cybersecurity analysts, secure ACCO Brands’ digital ecosystem, and drive cross-functional risk-reduction initiatives.

Reporting to the VP of Global Cybersecurity and Infrastructure, this role oversees day-to-day operations, strategy, and governance across IT, business units, and external partners. The role focuses on KPIs, CSF alignment, and secure practices across cloud and on-premise environments, with

Qualifications

• Bachelor’s degree in Information Security, CS, or related field.
• 10+ years of progressive cybersecurity experience with at least 2 years in a leadership role.
• Experience managing security operations, incident response, and vulnerability remediation in cloud environments.
• Experience working with Managed Security Service Providers (MSSPs).
• Strong working knowledge of security tooling, including SIEM platforms, EDR (e.g., CrowdStrike), and email security gateways (e.g., Proofpoint).
• Familiarity with security frameworks such as NIST CSF, ISO 27001, or CIS Controls.

Responsibilities

• Lead strategy, governance and risk initiatives and align with enterprise risk posture and business objectives.
• Oversee daily security operations, incident response, and threat detection across the global security program.
• Manage vulnerability management lifecycle, remediation efforts, and patching SLAs with IT/infrastructure teams.
• Oversee cloud security controls in Azure and other providers, and collaborate with development teams on SDLC security.
• Design and drive a Third-Party Risk Management program and manage MSSPs and security partners.

Skills

Leadership

Cybersecurity strategy

Governance & risk

Incident response

Threat intel

Team mentoring

Cross-functional collaboration

Security operations

Vendor management

Education

Bachelor’s degree in Information Security, CS, or related

Tools

CrowdStrike Falcon

Rapid7 InsightIDR

Proofpoint

Cisco Umbrella

SSO/MFA technologies

NGAV/EDR

Firewalls

ISO/NIST frameworks

Job description

A company with a pioneering past and a purposeful future.

At ACCO Brands, we are united by a common purpose, to empower our consumers to feel good when they work, learn, and play. For more than a century we have developed and nurtured brands that enable people to work with more productivity, learn with more confidence, and play with more enjoyment. We are passionate about a winning culture where we grow together, driving business, professional growth, and success. We invite you to be part of a team that is grounded in a history of category‑leading brands and products and focused on positioning our company for the future.

Job Summary

ACCO Brands is seeking a dynamic, forward‑thinking Sr. Cybersecurity Manager to lead a global team of cybersecurity analysts, secure ACCO Brands’ global digital ecosystem, and drive cross‑functional risk‑reduction initiatives across business units and infrastructure teams. Reporting to the VP of Global Cybersecurity and Infrastructure, this role oversees day‑to‑day cybersecurity operations, drives strategic security initiatives, and serves as a key liaison across IT, business units, and external partners.

Responsibilities

Strategy, Governance & Risk

• Partner with the VP of Global Cybersecurity and Infrastructure to align security initiatives with enterprise risk posture, compliance obligations, and business objectives, translating them into cybersecurity priorities and roadmaps.
• Leverage external security benchmarking and maturity assessments (e.g., BitSight, NIST) to develop cybersecurity performance metrics for executive leadership as part of broader risk and performance reporting.
• Represent Cybersecurity in enterprise‑level initiatives and governance councils, influencing business decisions through security insights and risk intelligence.
• Lead enterprise‑wide governance initiatives aligned with the NIST Cybersecurity Framework (CSF), translating technical risk into actionable business insights for executive stakeholders and identifying areas for improvement and control gaps.
• Define and track key performance indicators (KPIs) and control metrics aligned with NIST CSF functions.
• Contribute to and enforce cybersecurity policies, standards, and procedures that support compliance with PCI DSS, GDPR, SOX, and internal governance requirements.
• Drive control validation initiatives to ensure the ongoing effectiveness of technical and administrative safeguards.

Team Leadership & Development

• Lead, mentor, and manage a team of cybersecurity analysts and security engineers.
• Coordinate workload planning, performance evaluations, and skill development across the cybersecurity team.
• Foster a collaborative team culture through one‑on‑one coaching, career development, and goal setting.

Security Operations & Incident Response

• Oversee daily security operations, including monitoring, triage, and incident response, using tools such as Rapid7 InsightIDR and CrowdStrike Falcon.
• Serve as a key member of the cybersecurity incident response process, supporting the VP of Global Cybersecurity and Infrastructure from detection through resolution and post‑incident review.
• Manage continuous threat detection, intelligence gathering, and escalation procedures.
• Oversee and guide analysts and engineers responsible for managing tools such as Proofpoint, Cisco Umbrella, SSO/MFA platforms, and next‑generation firewalls, ensuring alignment with security strategy and best practices.

Additional Responsibilities

Vulnerability & Threat Management

• Manage the enterprise vulnerability management lifecycle, including identification, validation, and risk‑based remediation.
• Partner with IT and infrastructure teams to validate remediation plans and enforce patching SLAs.
• Coordinate and advance internal remediation activities and processes to improve and maintain the organization’s external risk posture.

Cloud & Application Security

• Oversee the development, implementation, and management of cloud security controls within Microsoft Azure and other cloud providers as applicable.
• Collaborate with application development teams to integrate security practices into the software development lifecycle (SDLC).
• Evaluate and enhance application security policies, secure coding practices, and code review procedures.
• Ensure secure configurations and identity management across cloud‑native platforms.
• Partner with business and IT teams on security architecture reviews and secure project enablement.

Vendor, Third‑Party & Awareness Programs

• Design and roll out a Third‑Party Risk Management program to inventory and assess cybersecurity risk across third parties, and integrate findings into the enterprise risk posture.
• Manage vendor relationships, including MSSPs and security solution providers, to ensure alignment with program goals, service levels, and cost‑effectiveness.
• Evaluate and review security tools and technologies, recommending improvements, replacements, or integrations that strengthen the security program.
• Own the strategy and execution of the enterprise‑wide security awareness program, including phishing simulations, social engineering campaigns, annual Cybersecurity Awareness Month activities, and internal newsletters.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent work experience.
• 10+ years of progressive experience in cybersecurity, including at least 2 years in a leadership or supervisory capacity.
• Demonstrated experience managing security operations, incident response, and vulnerability remediation in cloud environments.
• Experience working with Managed Security Service Providers (MSSPs).
• Strong working knowledge of security tooling, including SIEM platforms, EDR (e.g., CrowdStrike), and email security gateways (e.g., Proofpoint).
• Hands‑on familiarity with Cisco Umbrella, Microsoft 365 security, SSO/MFA, NGAV/EDR, and enterprise firewall platforms.
• Solid understanding of enterprise IT, networking, identity and access management, encryption, and SIEM architecture.
• Familiarity with security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
• Working knowledge of AI governance principles and experience supporting the implementation of AI governance frameworks within an enterprise security program.
• Proven ability to manage competing priorities across multiple teams and time zones.
• Excellent verbal and written communication skills, with the ability to translate technical risk into business terms for executive audiences.
• Strong collaboration and stakeholder management skills across IT, business units, and external partners.

Preferred Qualifications

• CISSP, CISM, or CISA
• Cloud security certification (e.g., Microsoft Certified: Azure Security Engineer Associate)
• GIAC certifications (e.g., GCIH, GSEC) a plus

Salary Range

$140,000 - $180,000

About Us

You know our brands. You love our brands. You just may not know they are ours. If you have touched a PowerA® gaming controller, a Five Star® notebook, a Swingline® stapler, a Quartet® dry erase board, or a Kensington® computer mouse, you have touched part of ACCO Brands Corporation. With annual revenues of more than $1.5 Billion, ACCO Brands (NYSE: ACCO) designs, markets, manufactures, and sells branded academic, consumer, and business products globally. The power of our brands, our unmatched global customer reach, and our strategic market strengths put us in a position to achieve global leadership and growth. We’re proud of our long history of industry leadership and innovation and are focused on delivering exceptional value to our customers by providing unique, cutting‑edge, branded products.

What We Offer

• Comprehensive medical, prescription, dental, and vision plans
• 4% 401(k) match with immediate eligibility and vesting
• Competitive time off, available from the first day of employment
• Parental leave
• Company‑paid life and disability benefits
• Critical illness, accident, and long‑term care insurance options
• Employee and family assistance programs

Growing together is how we win. With trusted brands, strong leadership, and a clear purpose, you’ll find opportunities to grow in your career, contribute to meaningful work, and be a part of a culture that values creativity and putting our consumers and customers first.

More information about ACCO Brands can be found at www.accobrands.com.

Equal Opportunity Employer

ACCO Brands is an equal opportunity employer, and all qualified candidates will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, marital status, national origin, physical or mental disability, veteran status, or any other characteristic protected by applicable law. The company strives to create a winning culture with a leadership promise to provide equal access and opportunity for all to grow, succeed, and contribute to their full potential.

AODA

Accommodation for applicants with disabilities will be provided in all parts of the recruiting process as required under the ACCO Brands Canada AODA policy. Applicants are asked to make their needs known in advance.