You can G.R.O.W. with Us by becoming our Senior Cybersecurity Manager

(must be able to reliable commute to the office on a weekly basis)

ROLE

The Senior Cyber Security Manager leads and supports ongoing cybersecurity activities, incident management, and projects. This role is at the forefront of safeguarding our organization's digital assets. Collaborates closely with leaders, IT teams, vendors, and cross-functional peers to ensure effective monitoring and vulnerability management. Working alongside a dedicated team, responsibilities include maintaining security systems, identifying vulnerabilities, and devising robust strategies to mitigate cyber threats and safeguard sensitive data.

ESSENTIAL RESPONSIBILITIES

• Manage the development, implementation, and monitoring of the organization's cybersecurity strategy and policies.
• Maintain security systems, identify vulnerabilities, and devise strategies to prevent cyber threats and data breaches.
• Manage the overall security posture and risk management program for on-premises and cloud-based solutions, focusing on delivering measurable outcomes and continuous improvement; Establish performance metrics and key performance indicators (KPIs) to measure the effectiveness of your team's efforts.
• Lead and support cybersecurity initiatives, including vulnerability remediation, infrastructure monitoring, incident management, and analytics reporting.
• Assume the designated leader role, where applicable, for the Cyber Incident Response Team, communicates the incident to senior leaders, and engages team members in responding to the incident.
• Manage cybersecurity budgets, projects, incidents, legal matters, and compliance efforts.
• Provide high-level technical leadership in risk assessments, implementation, and operational aspects of information security procedures and products.
• Foster a culture of security awareness through training programs and communication efforts.
• Collaborate with cross-functional teams to integrate cyber security into projects, systems, and processes.
• Define policy, recommend security controls, and provide all-inclusive costs for the implementation and management of cybersecurity solutions enterprise-wide.
• Provide leadership and guidance and identify development opportunities for the cybersecurity team members.
• Stay abreast of the latest information security threats, trends, and technologies, adapting security measures accordingly.
• Ensure compliance with relevant laws and regulations, such as SOC2, ISO, GDPR, NIST, and CCPA; collaborate with legal, risk, and compliance teams as required.
• Other duties as assigned.

QUALIFICATIONS

Any combination of education and experience that would likely provide the required knowledge, skills and abilities is qualifying. A typical way to qualify is:

• Six years of IT experience, with at least five years in cybersecurity or IT infrastructure, and five+ years in leadership roles preferred.
• Strong background in infrastructure and experience managing cybersecurity activities and fixes.
• Working knowledge of cybersecurity operations, technologies, processes, and policies.
• Ability to effectively communicate cybersecurity risks and strategies to stakeholders and IT teams.
• Proficiency in both oral and written communication, including executive-level presentations.
• Ability to work at all organizational levels and communicate effectively with senior leadership.
• Strong leadership skills and ability to adhere to strict confidentiality requirements.
• Proficiency in Microsoft Office applications.
• Familiarity with compliance frameworks such as SOC2, ISO, GDPR, NIST, and CCPA.
• Industry certifications such as CISSP or CISM preferred.
• Principles of employee training, supervision, and evaluation.
• Supervisory techniques, resource allocation, planning, and budgeting.
• Driver's license required.
• Mastery of California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Payment Card Industry Security Standard (PCI DSS), California Data Breach Notification Laws, California Information Security Office (CISO) Policies and Guidelines and other relevant data and cyber security standards and requirements.
• Bachelor's degree or equivalent working experience preferred.

RECOLOGY OFFERS:

• An ecologically innovative company that finds and mentors people committed to protecting the environment and sustaining our communities.
• The largest employee-owned resource recovery company in the industry with terrific benefits to help you prosper.
• A creative and caring culture that values community, diversity, altruism, accountability, collaboration, and learning by doing.
• An inspired company mission driven to use and return resources to their best and highest use through the practice of the 4R's: Reduce, Re-use, Recycle, and Recologize.
• Distinct professional challenges to connect with, care for, and grow community that sees a world without waste.

RECOLOGY BENEFITS MAY INCLUDE:

• Paid time off and paid holidays.
• Health and wellness benefits including medical, dental, and vision.
• Retirement plans (Employee Stock Ownership Plan, 401(k) with match).
• Annual wellness incentives.
• Employee Assistance Program (EAP).
• Educational assistance.
• Commuting benefits.
• Employee referral program.

SUPPLEMENTAL INFORMATION

Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of this job; and pursuant to applicable law, we will consider for employment qualified applicants with criminal records. It is important that you provide accurate information on the job application, inaccurate information may cause delays in the processing of your application and/or may disqualify you as a candidate.

Recology is an equal opportunity employer committed to supporting an inclusive and diverse work environment where employees are valued, heard, and provided development opportunities. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, citizenship, disability, protected veteran status, or any other basis that is prohibited by law.

This description is not intended and should not be construed to be an exhaustive list of all responsibilities, skills, effort, work conditions, and benefits associated with the job.