Manager, Cyber Security

Job Description:

Location: 100% remote, must live in Central or Eastern Region

Salary Range: $150,000 - $165,000

Company Overview

Performing over 80 million locates annually, USIC is the most trusted name in underground utility damage prevention.

USIC also provides a full suite of utility services throughout North America.

Our Mission: to deliver quality, efficient, safe, and innovative solutions to protect our partners’ infrastructure and critical assets.

Our Culture is known as Living the SAFE-LIFE: Protecting Infrastructure, Protecting Our Communities, Protecting Ourselves.

Summary

The Cybersecurity Manager is a senior role responsible for leading, maturing, and hands-on execution of the organization’s information security program.

Operating across a large enterprise environment of 2,500–10,000 employees in a hybrid cloud/on-premise landscape, this individual will serve as both a strategic program leader and a working technical practitioner.

With one direct report, the Cybersecurity Manager must be capable of operating independently, driving security initiatives end-to-end, and building a scalable security function aligned to industry best practices including NIST CSF, CIS Controls, and ISO 27001.

Responsibilities



* Own and mature the organization’s information security program and policy framework


* Lead risk assessments and maintain the enterprise risk register with remediation tracking


* Develop and enforce security policies, standards, and procedures aligned to NIST CSF and CIS Controls


* Report security posture, risk trends, and program metrics to senior leadership and stakeholders


* Manage internal and external audit engagements related to cybersecurity


* Oversee day-to-day security monitoring across SIEM, EDR, and network detection tooling


* Define detection and alerting strategies; tune rules to reduce false positives


* Review and triage escalated alerts; serve as a hands-on analyst when needed


* Maintain and improve SOC playbooks, runbooks, and escalation procedures


* Serve as the Incident Response lead for all cybersecurity events and breaches


* Develop, maintain, and exercise the Incident Response Plan (IRP) and associated playbooks


* Coordinate cross-functional response with IT, Legal, HR, and Executive leadership


* Conduct post-incident reviews and drive remediation of identified gaps


* Oversee security architecture reviews for on-premise and cloud environments (AWS, Azure, or GCP)


* Ensure security-by-design principles are applied to infrastructure changes and new deployments


* Manage vulnerability management program including scanning, prioritization, and remediation tracking


* Partner with IT and DevOps teams to embed security controls into the SDLC and cloud pipelines


* Govern IAM strategy including role-based access control (RBAC), least privilege, and access reviews


* Oversee MFA, SSO, and privileged access manag...