Cybersecurity Manager

Cybersecurity Manager

Location: South Shore of Boston

About Our Client
Our client is a well-established regional property and casualty insurance company headquartered south of Boston, and a perennial "Best Places to Work" honoree. They offer flexible work arrangements, competitive salaries and benefits, and strong investment in employee growth, including on-site fitness and wellness resources, tuition assistance, mentorship, and professional development programs.

The Opportunity
Our client is seeking a highly experienced, technically proficient Cybersecurity Manager to lead day-to-day security operations and ensure consistent execution of key cybersecurity initiatives. This role is best suited for a hands-on leader with broad, real-world experience across cybersecurity technologies and domains. The ideal candidate has a proven track record of running security operations, improving processes, and driving remediation efforts to completion, and will bring structure, accountability, and follow-through to the team while aligning with frameworks such as NIST and CIS.

Key Responsibilities

• Security program operations: Oversee core security functions, including security monitoring, vulnerability management, identity and access management, endpoint protection, and network security, making sure tools and processes are functioning effectively and delivering meaningful results.
• Security Operations (SecOps): Own monitoring, detection, and response across the environment using SIEM, EDR, and network-based detection platforms. Tune detections to reduce noise, make alerts actionable, establish consistent triage, investigation, and response processes, and strengthen incident response practices.
• Execution: Own a prioritized body of work including vulnerability remediation, audit findings, and control improvements. Bring structure to ongoing efforts, identify where work is stalling, and drive initiatives to completion with measurable outcomes.
• Frameworks and audit: Align security practices with NIST and CIS in a practical, sustainable way, translate framework requirements into real-world controls, and support audit activities.
• Cloud and application security: Partner with infrastructure and engineering teams to ensure appropriate controls across cloud platforms, SaaS environments, and internally developed or supported applications.
• People leadership: Build and maintain a high-performing team through mentoring, technical development, and clear performance expectations; assess skill gaps and position the team for current and near-term priorities.

Required Qualifications

• 7+ years of cybersecurity experience with strong hands-on technical depth across multiple domains, including 3+ years in a leadership role
• Broad, practical experience with SIEM, EDR, vulnerability management and scanning tools, IAM/PAM solutions, and network security platforms
• Experience with cloud security (Azure, AWS, or GCP) and familiarity with application security practices
• Demonstrated ability to drive remediation efforts and operational work to completion
• Experience aligning security controls to frameworks such as NIST or CIS in a practical, operational way
• Proven experience managing, mentoring, and developing team members

Preferred Qualifications

• Experience with tools such as Rapid7, Microsoft E5 Security (Defender, Entra ID, Purview), Darktrace, CyberArk, and Palo Alto
• Experience in regulated environments such as financial services or insurance
• Background in audit support and remediation management
• Relevant certifications such as CISSP, CISM, or equivalent

Compensation
The estimated salary range for this position is approximately $160,000 to $180,000, based on skills, experience, certifications, and other factors, plus a comprehensive benefits package.