Sr. Manager, Enterprise Cybersecurity & Information Security

North Texas Tollway Authority; Florida; On-site; USD 150,000 - 210,000; Full time

Job summary

North Texas Tollway Authority seeks a strategic cybersecurity leader to direct enterprise information security, risk management, and regulatory compliance programs. This executive role partners with the C-suite, business units, and technology teams to protect assets, critical infrastructure, and customer information while enabling business objectives.

The role will drive governance, incident response, third-party risk, and security culture across NTTA, reporting to senior leadership and the

Qualifications

• Knowledge of cybersecurity governance, regulatory compliance, privacy requirements, and industry frameworks, including NIST, PCI DSS, SOC, ISO 27001, CIS Controls, and applicable federal, state, and local regulations.
• Tech-savvy knowledge of enterprise cybersecurity operations, including security architecture, cloud security, identity and access management, threat intelligence, vulnerability management, incident response, and business continuity practices.
• Strategic mindset with ability to develop and execute enterprise cybersecurity strategies, roadmaps, and governance programs aligned with organizational priorities.
• Decision quality in evaluating cyber risks, threats, and technology trends to develop practical, risk-based solutions.
• Ability to analyze complex business, technology, and security challenges and make effective decisions.
• Effective communication of cybersecurity risks and program performance to executives and the Board.
• Capability to build strategic partnerships across departments, vendors, government agencies, and external stakeholders.
• Leadership to drive organizational change and foster a culture of security awareness and accountability.

Responsibilities

• Develop, implement, and maintain NTTA's enterprise cybersecurity strategy, roadmap, policies, standards, and governance framework.
• Lead Cybersecurity Operations, threat detection, incident response, vulnerability management, and cyber resilience activities.
• Establish and maintain an enterprise cyber risk management program with assessments and reporting.
• Ensure compliance with PCI DSS, NIST CSF, SOC controls, and other relevant standards.
• Lead cybersecurity awareness, education, and training initiatives to strengthen security culture.
• Develop and present cybersecurity metrics, risk assessments, and incident reports to senior leadership and the Board.
• Direct third-party cybersecurity risk management activities and vendor reviews.
• Partner with business and technology leaders to integrate security into enterprise architecture, projects, cloud, and data processes.
• Lead and develop high-performing cybersecurity teams and foster innovation and accountability.

Skills

Cybersecurity governance

Regulatory compliance

Cloud security

Incident response

Vulnerability management

Risk assessment

Security architecture

Budget management

Communication

Board reporting

Job description

Job Description

JOB SUMMARY:This role provides strategic and operational leadership for NTTA's enterprise cybersecurity, information security, cyber risk management, and regulatory compliance programs.This position is responsible for developing and executing a comprehensive cybersecurity strategy that protects organizational assets, critical infrastructure, customer information, and technology resources while enabling business objectives.The role serves as NTTA's senior cybersecurity leader, partnering with executive leadership, business stakeholders, and technology teams to manage cyber risk, ensure regulatory compliance, strengthen organizational resilience, and promote a culture of security awareness across the enterprise.

DUTIES, FUNCTIONS, AND RESPONSIBILITIES:

• Develop, implement, and maintain NTTA's enterprise cybersecurity and information security strategy, roadmap, policies, standards, and governance framework aligned with organizational objectives while ensuring effective oversight, accountability, and alignment with business priorities and risk tolerance.
• Lead Cybersecurity Operations, threat detection, incident response, vulnerability management, and cyber resilience activities to protect critical business systems and infrastructure.
• Establish and maintain an enterprise cyber risk management program, including risk assessments, mitigation strategies, and reporting on cybersecurity risks and trends.
• Ensure compliance with applicable cybersecurity, privacy, and regulatory requirements, including PCI DSS, NIST Cybersecurity Framework, SOC controls, and other relevant standards.
• Lead cybersecurity awareness, education, and training initiatives to strengthen organizational security culture and reduce human risk factors.
• Develop and present cybersecurity metrics, risk assessments, program maturity updates, and incident reporting to senior leadership, executive and board.
• Direct third-party cybersecurity risk management activities, including security assessments, vendor reviews, contractual requirements, and ongoing monitoring of critical service providers.
• Partner with business and technology leaders to integrate security requirements into enterprise architecture, project delivery, cloud initiatives, data management, and operational processes.
• Lead and develop high-performing cybersecurity teams through recruitment, coaching, performance management, succession planning, and employee development while fostering a culture of innovation, accountability, collaboration, continuous improvement, and operational excellence.

SUPERVISORY/LEADERSHIP RESPONSIBILITIES:

Responsible for the full range of supervisory activities including selection, training, evaluation, coaching, employee development, performance management, and recommendation for corrective action or dismissal. Establishes departmental goals and objectives, manages resource allocation and budgets, and promotes a culture of accountability, innovation, collaboration, and continuous improvement

KNOWLEDGE, SKILLS, AND ABILITIES:

• Business Insight / Ensures Accountability: Knowledge of cybersecurity governance, regulatory compliance, privacy requirements, and industry frameworks, including NIST, PCI DSS, SOC, ISO 27001, CIS Controls, and applicable federal, state, and local regulations.
• Tech Savvy / Business Insight: Knowledge of enterprise cybersecurity operations, including security architecture, cloud security, identity and access management, threat intelligence, vulnerability management, incident response, and business continuity practices.
• Strategic Mindset / Drives Vision and Purpose: Ability to develop and execute enterprise cybersecurity strategies, roadmaps, and governance programs that align with organizational priorities and support long-term business objectives.
• Decision Quality / Strategic Mindset: Skill in evaluating cyber risks, emerging threats, and technology trends and developing practical, risk-based solutions that strengthen organizational security and resilience.
• Manages Complexity / Courage: Skill in analyzing complex business, technology, and security challenges, exercising sound judgment, and making effective decisions in dynamic and evolving environments.
• Communicates Effectively / Persuades: Skill in communicating cybersecurity risks, strategies, and program performance effectively to executive leadership, the Board of Directors, stakeholders, and technical audiences.
• Collaborates / Organizational Savvy: Skill in building strategic partnerships and fostering collaboration across departments, vendors, government agencies, and external stakeholders to advance organizational security objectives.
• Drives Vision and Purpose / Cultivates Innovation: Ability to lead organizational change, promote a culture of security awareness and accountability, and evaluate emerging technologies and thr