Description

We’re looking for an Enterprise Cybersecurity Manager to join our team! This role will drive policy, governance, and training, while embedding security into operations and digital initiatives. If you're ready to shape SHA’s security future, we want to hear from you.

• Lead and evolve SHA’s enterprise security strategy and multi-year roadmap
• Ensure compliance with regulations and align security with enterprise risk management
• Brief executive leadership on security posture, risks, and incidents
• Oversee identity and access management, including MFA and privileged access
• Assess program maturity and track performance metrics
• Develop and maintain security policies, standards, and procedures
• Manage security infrastructure across on-prem, cloud, and hybrid environments
• Design and support scalable security architecture for business needs
• Lead incident response, including investigation, recovery, and analysis
• Conduct risk assessments and adjust posture based on emerging threats
• Promote security awareness and build a culture of preparedness
• Manage vendor security risks and enforce contract requirements

Requirements

Education:

Master’s degree in computer science, software engineering, or a related field
Certifications:

At least one of the following:

• CISSP – Certified Information Systems Security Professional
• CISM – Certified Information Security Manager
• CISAP – Certified Information Systems Auditor
• GSLC – GIAC Security Leadership Certification
• GSEC – GIAC Security Essentials Certification
• CCSP – Certified Cloud Security Professional
• ISO/IEC 27001 Lead Implementer or Lead Auditor
• Microsoft Certified: Cybersecurity Architect Expert or equivalent
• AWS Certified Security – Specialty
• Azure Security Engineer Associate

Experience:

Minimum 6 years of progressive experience in advanced cybersecurity management or a related fieldEquivalent combinations of education, training, and experience may be considered

Core Knowledge and Abilities:

• Cybersecurity Expertise: Deep understanding of enterprise security laws, policies, architecture, and threat mitigation tools.
• Technical Proficiency: Skilled in managing VPNs, firewalls, intrusion detection, identity access systems, and Windows-based environments.
• Strategic Implementation: Capable of designing and deploying multi-layered security solutions to address complex internal and external threats.
• Analytical & Problem-Solving: Able to assess vulnerabilities, troubleshoot issues, and enhance security posture with effective tools and practices.
• Communication & Collaboration: Strong ability to convey technical concepts clearly and build productive relationships across teams and partners.