Cybersecurity Manager

Builders Mutual is hiring a Cybersecurity Manager to lead the Cybersecurity Program, shape security strategy, and help protect the confidentiality, integrity, and availability of electronic information. In this hybrid role based in Raleigh, you will partner across teams to build enforceable policies, strengthen controls, and support compliance with applicable regulatory requirements.

What you’ll do

• Create and maintain the Cybersecurity Program, including leading the Cybersecurity team.
• Establish an annual security roadmap and align security strategy with business goals and objectives.
• Implement and monitor information security standards and policies for BMIC, ensuring consistency with regulatory and compliance requirements.
• Develop and coordinate cyber security awareness and education programs.
• Ensure system-wide incident response plans are in place.
• Implement, monitor, and manage cloud-related security controls.
• Evaluate, choose, adapt, and drive security standards and risk management programs to support data integrity, confidentiality, and availability.
• Define and oversee disaster recovery policies and standards, coordinating implementation plans so business-critical services recover after a declared disaster.
• Identify, evaluate, and report information security risks, practices, and projects.
• Serve as the process owner for ongoing activities supporting availability, integrity, and confidentiality of customer, vendor, employee, and business information in compliance with industry directives.
• Lead strategic security planning with End User Services, Application Development, and Infrastructure Services teams.
• Facilitate IT risk analysis and risk management processes with other departments, including defining acceptable levels of risk and roles and responsibilities for information classification and protection.
• Create and manage information security and risk management training programs for employees, contractors, and approved system users.
• Coordinate security-related product evaluation, procurement, and deployment with other departments.

What you’ll bring

• Bachelor’s degree or equivalent experience in an IT-related discipline, plus 5–7 years’ experience combining risk management, information security, and IT roles with progressive responsibility (or an equivalent combination of education and experience).
• 4+ years of information security engineering experience.
• 1+ years of experience performing penetration testing of network, application, and IT resources.
• Professional information security certifications required, such as CompTIA Security+, SSCP, CISSP, CISM, CCNA Security, CCNP Security, CEH, GIAC, or CISA.
• Proven experience with current IT security technologies and demonstrated experience with security frameworks.
• Understanding of technological trends in information security, risk management, web architectures, and cloud computing.
• Ability to frame security and risk concepts for both technical and nontechnical audiences.
• In-depth knowledge of IT technologies including cybersecurity best practices and areas such as Routing & Switching (LAN/WAN), WLAN, Radius, Firewalls, SSO/SAML, SaaS/Cloud Services, Identity Access Management, SDLC, Microsoft technologies (Active Directory, IIS, ISA, DNS, SQL), and Linux.
• Knowledge and direct experience with vulnerability management, SIEM and log management, file integrity, proxy servers, DLP, IPS/IDS, VPN, PKI, multi-factor authentication, and cryptography.
• Knowledge and direct experience incorporating ISO 27002, NIST Cybersecurity Framework, and other security control frameworks and standards.
• Strong analytic, problem-solving, management, and organizational skills, along with excellent written, verbal, and presentation abilities.

Benefits that support your wellbeing

• Competitive compensation and a performance bonus program
• 3 weeks of PTO to start, plus your birthday off
• 37.5-hour workweek, with Fridays ending at 2:30 PM
• Professional development through Builders University
• Everyday Wins recognition with swag and extra time off
• 8 paid Volunteer Time Off (VTO) hours
• Comprehensive benefits to support your wellbeing today and your future tomorrow

Location and work setup

Raleigh, NC (hybrid): This role works in the Raleigh office a minimum of two days, with flexibility to work from home the remaining three days.