Cybersecurity Manager
The Cybersecurity Manager will deliver expert security leadership and strategic guidance to support a dynamic and evolving cybersecurity program. This individual will be responsible for managing and enhancing existing security initiatives, staying ahead of the evolving threat landscape, and scaling protection services as needed. As a key member of a broader IT team dedicated to delivering innovative technology solutions, the role will collaborate closely with senior IT leadership to shape the direction and execution of governance, risk, and compliance (GRC) efforts within the organization.
location: Sterling Heights, Michigan
job type: Permanent
salary: $110,000 - 150,000 per year
work hours: 8am to 5pm
education: Bachelors
responsibilities:
- Lead the development, execution, and continuous improvement of the organization's cybersecurity program, encompassing technical solutions, employee training, security awareness, and governance initiatives.
- Maintain and update the organization's corporate information security policy in alignment with evolving business and regulatory requirements.
- Develop and manage long-term cybersecurity and governance roadmaps, including a comprehensive five-year strategic plan.
- Conduct and maintain a company-wide global risk assessment to identify and mitigate potential threats.
- Regularly collect, analyze, and present cybersecurity metrics to senior leadership to inform decision-making and demonstrate program effectiveness.
- Serve as the primary point of contact for all cybersecurity-related audits, assessments, investigations, and inquiries, including compliance with standards such as IATF and ISO.
- Oversee the operations of the Security Operations Center (SOC), Network Operations Center (NOC), and Security Information and Event Management (SIEM) systems.
- Develop, maintain, and test the organization's global incident response plan and associated operational runbooks.
- Maintain and evolve the Business Continuity and Disaster Recovery (BC/DR) programs to ensure organizational resilience.
- Establish, manage, and communicate cybersecurity governance, policies, and procedures, including:
- Writing and maintaining user acceptance and global information security policies
- Facilitating training on governance procedures
- Implementing governance models such as NIST, with expertise in PC/server hardening
- Applying knowledge of ISO 27001 and TISAX frameworks with the capability to support certification efforts
Cybersecurity Awareness & Training
- Lead the cybersecurity awareness and training program, including regular phishing simulations and ongoing campaign-based education.
- Report training results, phishing test outcomes, and organizational risk levels through actionable metrics.
- Foster a culture of cybersecurity awareness across the organization through proactive engagement and education initiatives.
Cybersecurity Tools, Systems & Implementation
- Monitor and report monthly cybersecurity metrics, including risk exposure, patch levels, and SIEM alert trends.
- Implement and maintain policies and procedures for Identity and Access Management (IAM), data encryption, patch management, and privileged access control.
- Apply best practices in implementing zero-trust architecture, vulnerability management, penetration testing, and business continuity testing.
- Experience with advanced security tools and systems such as Data Loss Prevention (DLP) solutions and CrowdStrike.
- Preferred experience with Governance, Risk, and Compliance (GRC) platforms and practices.
qualifications:
- Bachelor's degree from an accredited institution; a focus in Cybersecurity or a related field is strongly preferred
- Minimum of 5 years of hands-on experience in cybersecurity roles or related job functions
- Proven experience with Security Information and Event Management (SIEM) systems
- Demonstrated leadership in implementing and managing security awareness programs, including use of platforms such as KnowBe4
skills:
- Strong analytical and problem-solving abilities, with a keen attention to detail and a proactive, self-motivated work style
- Proficient in implementing and aligning cybersecurity programs with industry-recognized frameworks such as NIST, COBIT, and ISO/IEC 27001
- Experienced in leveraging Microsoft 365 and associated Microsoft security tools to enhance organizational protection
- In-depth knowledge of SIEM systems (SEI preferred), with hands-on experience in monitoring, analysis, and response
- Skilled in using KnowBe4 for security awareness training; holds Security Awareness and Culture Professional (SACP) certification
- Solid experience in securing cloud-based applications and platforms
- Strong understanding of Windows Domain environments and core networking security principles
- Demonstrated leadership in driving enterprise cybersecurity projects and strategic initiatives
- Holds or is pursuing industry-leading certifications including:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CISA (Certified Information Systems Auditor)
- CGEIT (Certified in the Governance of Enterprise IT)
- SACP (Security Awareness and Culture Professional)
- CCNA (Cisco Certified Network Associate)
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including health, an incentive and recognition program, and 401K contribution (all benefits are based on eligibility).
This posting is open for thirty (30) days.
The Cybersecurity Manager will deliver expert security leadership and strategic guidance to support a dynamic and evolving cybersecurity program. This individual will be responsible for managing and enhancing existing security initiatives, staying ahead of the evolving threat landscape, and scaling protection services as needed. As a key member of a broader IT team dedicated to delivering innovative technology solutions, the role will collaborate closely with senior IT leadership to shape the direction and execution of governance, risk, and compliance (GRC) efforts within the organization.
location: Sterling Heights, Michigan
job type: Permanent
salary: $110,000 - 150,000 per year
work hours: 8am to 5pm
education: Bachelors
responsibilities:
- Lead the development, execution, and continuous improvement of the organization's cybersecurity program, encompassing technical solutions, employee training, security awareness, and governance initiatives.
- Maintain and update the organization's corporate information security policy in alignment with evolving business and regulatory requirements.
- Develop and manage long-term cybersecurity and governance roadmaps, including a comprehensive five-year strategic plan.
- Conduct and maintain a company-wide global risk assessment to identify and mitigate potential threats.
- Regularly collect, analyze, and present cybersecurity metrics to senior leadership to inform decision-making and demonstrate program effectiveness.
- Serve as the primary point of contact for all cybersecurity-related audits, assessments, investigations, and inquiries, including compliance with standards such as IATF and ISO.
- Oversee the operations of the Security Operations Center (SOC), Network Operations Center (NOC), and Security Information and Event Management (SIEM) systems.
- Develop, maintain, and test the organization's global incident response plan and associated operational runbooks.
- Maintain and evolve the Business Continuity and Disaster Recovery (BC/DR) programs to ensure organizational resilience.
- Establish, manage, and communicate cybersecurity governance, policies, and procedures, including:
- Writing and maintaining user acceptance and global information security policies
- Facilitating training on governance procedures
- Implementing governance models such as NIST, with expertise in PC/server hardening
- Applying knowledge of ISO 27001 and TISAX frameworks with the capability to support certification efforts
Cybersecurity Awareness & Training
- Lead the cybersecurity awareness and training program, including regular phishing simulations and ongoing campaign-based education.
- Report training results, phishing test outcomes, and organizational risk levels through actionable metrics.
- Foster a culture of cybersecurity awareness across the organization through proactive engagement and education initiatives.
Cybersecurity Tools, Systems & Implementation
- Monitor and report monthly cybersecurity metrics, including risk exposure, patch levels, and SIEM alert trends.
- Implement and maintain policies and procedures for Identity and Access Management (IAM), data encryption, patch management, and privileged access control.
- Apply best practices in implementing zero-trust architecture, vulnerability management, penetration testing, and business continuity testing.
- Experience with advanced security tools and systems such as Data Loss Prevention (DLP) solutions and CrowdStrike.
- Preferred experience with Governance, Risk, and Compliance (GRC) platforms and practices.
qualifications:
- Bachelor's degree from an accredited institution; a focus in Cybersecurity or a related field is strongly preferred
- Minimum of 5 years of hands-on experience in cybersecurity roles or related job functions
- Proven experience with Security Information and Event Management (SIEM) systems
- Demonstrated leadership in implementing and managing security awareness programs, including use of platforms such as KnowBe4
skills:
- Strong analytical and problem-solving abilities, with a keen attention to detail and a proactive, self-motivated work style
- Proficient in implementing and aligning cybersecurity programs with industry-recognized frameworks such as NIST, COBIT, and ISO/IEC 27001
- Experienced in leveraging Microsoft 365 and associated Microsoft security tools to enhance organizational protection
- In-depth knowledge of SIEM systems (SEI preferred), with hands-on experience in monitoring, analysis, and response
- Skilled in using KnowBe4 for security awareness training; holds Security Awareness and Culture Professional (SACP) certification
- Solid experience in securing cloud-based applications and platforms
- Strong understanding of Windows Domain environments and core networking security principles
- Demonstrated leadership in driving enterprise cybersecurity projects and strategic initiatives
- Holds or is pursuing industry-leading certifications including:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CISA (Certified Information Systems Auditor)
- CGEIT (Certified in the Governance of Enterprise IT)
- SACP (Security Awareness and Culture Professional)
- CCNA (Cisco Certified Network Associate)
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including health, an incentive and recognition program, and 401K contribution (all benefits are based on eligibility).
This posting is open for thirty (30) days.