Sr. Manager Cybersecurity

Oceaneering; Houston (TX); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Oceaneering is seeking a seasoned Cybersecurity Sr. Manager to lead security operations across IT and OT/ICS in a complex, high-consequence environment.

You will drive threat management, data privacy, and governance programs to protect critical systems and enable resilient operations. This role offers a hybrid work model with periodic Houston office presence, guiding internal teams and external partners to strengthen detection, response, and security maturity aligned with NIST CSF and ISO 27001.

Qualifications

• Minimum 15 years of cybersecurity experience, including leadership in security operations.
• Minimum 10 years in SOC operations, incident response, and vulnerability management.
• Experience with third-party security providers (MDR/SOC).
• Knowledge of NIST CSF and ISO 27001.
• Strong leadership and stakeholder engagement.

Responsibilities

• Lead security operations for IT and OT environments with 24x7 monitoring and response.
• Oversee vulnerability management, data privacy, and governance.
• Align security with business goals and risk tolerance.
• Drive security tooling optimization and cost governance.
• Lead incident response, threat hunting, and tabletop exercises.
• Develop security awareness and phishing simulation programs.

Skills

Security leadership

SOC operations

Threat & vulnerability management

Tools

SIEM

SOAR

EDR

MDR

Job description

Oceaneering is a global provider of engineered services and products, primarily to the offshore energy industry. We develop products and services for use throughout the lifecycle of an offshore oilfield, from drilling to decommissioning. We operate the world's premier fleet of work class ROVs. Additionally, we are a leader in offshore oilfield maintenance services, umbilicals, subsea hardware, and tooling. We also use applied technology expertise to serve the defense, material handling, aerospace, science, and renewable energy industries.
Equal Opportunity Employer: All qualified candidates will receive consideration for all positions without regard to race, color, age, religion, sex (including pregnancy), sexual orientation, gender identity, national origin, veteran status, disability, genetic information, or other non-merit factor.

About the Team

Our regional support functions play a critical role in enabling the success of all Oceaneering business units. These teams include disciplines such as Finance, HR, Recruitment, IT, HSE, Supply Chain, Quality, and Administration. Operating collaboratively across multiple departments and geographic locations, they provide responsive, high‑quality support that ensures our operations run efficiently and safely. Having these teams based locally allows us to make timely decisions, respond quickly to operational needs, and maintain strong alignment with our business units and workforce.

Job Description

We are seeking an experienced and strategic Cybersecurity Sr. Manager to lead our security operations across both enterprise IT and Operational Technology (OT/ICS) environments. This is a high-impact leadership role responsible for protecting critical systems, enabling resilient operations, and advancing our cybersecurity maturity in alignment with business goals and industry best practices.

You will lead security operations, threat and vulnerability management, and security culture initiatives while driving continuous improvement in detection, response, and risk reduction. This role offers the opportunity to shape the future of cybersecurity in a global organization operating in complex, high-consequence environments.

Role provides the opportunity to work in a hybrid environment, working both virtually and in the Houston office when required.

Responsibilities

You will lead security operations, vulnerability management, Data Privacy, and threat response across IT and OT environments—ensuring our organization is protected, resilient, and aligned with modern cybersecurity standards.

Lead Security Operations

Provide oversight and direction for both internal security teams and third‑party SOC/MDR partners

Ensure effective 24x7 monitoring, detection, and response to cyber threats

Continuously enhance SOC capabilities, including SIEM, SOAR, automation, and threat intelligence

Data Privacy

Establish and lead Oceaneering's Data Privacy and Governance function

Responsible for defining data protection policies, governance frameworks, privacy architecture standards, and investigative processes that ensure confidentiality, integrity, availability, and appropriate use of enterprise data

Provide strategic direction and oversight for data sovereignty, developing the governance structure, controls, and standards that business and technology teams follow across the organization

Drive Vulnerability & Patch Management (TVM)

Own the enterprise Threat & Vulnerability Management (TVM) program across IT and OT

Establish governance for patch management and risk‑based remediation

Prioritize vulnerabilities based on business risk and ensure timely resolution

Oversee Incident Response & Threat Hunting

Lead enterprise incident response and proactive threat hunting capabilities

Ensure readiness through tested playbooks and crisis response processes

Drive continuous improvement through post‑incident reviews and lessons learned

Optimize Security Tools & Investments

Manage the lifecycle, performance, and optimization of security tools and platforms

Align capabilities to the NIST Cybersecurity Framework (CSF)

Evaluate effectiveness, reduce redundancy, and ensure cost‑efficient security investments

Strengthen Security Awareness & Culture

Oversee enterprise‑wide security awareness and phishing simulation programs

Reduce human risk through targeted training and behavior‑driven initiatives

Track effectiveness through measurable outcomes (e.g., phishing resilience, engagement)

Development and execution of table top exercises to verify ownership

Align Security with Business & Risk

Partner with IT, OT, and business leaders to integrate security into operations

Align cybersecurity strategy with business priorities, risk tolerance, and resilience goals

• Communicate risk, performance, and priorities to senior leadership
• This position has supervisory responsibilities.

Qualifications

Required

Minimum 15 years of cybersecurity experience, including leadership in security operations

Minimum 10 years’ experience in SOC operations, incident response, and vulnerability management

Minimum 10 years’ experience working with or overseeing third‑party security providers (MDR/SOC)

Proven ability to align security strategy, tooling, and operations with business outcomes

Deep knowledge of frameworks such as NIST CSF and/or ISO 27001

Strong leadership, communication, and stakeholder engagement skills

Certifications such as CISSP or CISM

Experience in energy, oil & gas, or critical infrastructure environments

Familiarity with OT/ICS security (e.g., NIST 800-82, IEC 62443)

Experience managing security tooling strategy, optimization, and cost governance

Exposure to modern security technologies (SIEM, SOAR, EDR, MDR, cloud security)