Sr. IT Cyber Security Manager

Location: The Woodlands, TX
Work arrangement: Hybrid

We are recruiting a Senior Manager to lead cybersecurity operations and the organization’s IT governance, risk, and compliance programs for a publicly traded company. This person will set security strategy, strengthen the company’s risk posture, and work closely with IT leaders, business stakeholders, and internal and external auditors.

What you’ll do

• Develop and execute a multi-year cybersecurity and IT risk strategy aligned with business priorities.
• Lead security operations, including monitoring, threat detection, incident response, vulnerability management, and remediation.
• Establish and maintain security policies, standards, controls, and reporting using frameworks such as NIST, ISO 27001, and COBIT.
• Oversee security architecture and tools, including SIEM, endpoint protection, cloud security, and identity and access management.
• Lead IT governance and compliance efforts, including risk assessments, audit preparation, control testing, and remediation tracking.
• Partner with business and technology teams to identify security risks in new projects and systems.
• Evaluate appropriate uses of AI and automation in security operations and compliance, with clear oversight and data protection controls.
• Manage security vendors and lead, mentor, and develop cybersecurity and governance professionals.
• Report security risks, incidents, and program progress to senior leadership.

What we’re looking for

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field; master’s degree preferred.
• At least 8 years of experience in cybersecurity, security governance, or IT risk management, including 4 years in a leadership or management role.
• Experience building or improving enterprise cybersecurity and GRC programs.
• Hands-on understanding of security operations, incident response, cloud and network security, SIEM, and identity and access management.
• Experience working with auditors and translating technical risks into clear business recommendations.
• Knowledge of NIST, ISO 27001, COBIT, and applicable regulatory or public company controls.
• Strong communication skills and the ability to lead cross-functional initiatives.

Preferred certifications: CISSP, CISM, CRISC, CGEIT, Microsoft SC-100, or a comparable credential.

Compensation: Competitive base salary and bonus, commensurate with experience.

If you have led both cybersecurity operations and IT risk or compliance programs, we’d welcome a conversation.