Cybersecurity Manager / Information Security Manager

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Take the lead in executing the comprehensive cybersecurity program across the organization.

• Safeguard employees, systems, endpoints, client data, and cloud infrastructure.

• Oversee Microsoft 365 and Outlook email security, incorporating Defender for Office 365, Safe Links, Safe Attachments, anti-phishing measures, and protection against impersonation.

• Implement and manage enterprise-level endpoint protection utilizing EDR/XDR solutions.

• Administer employee devices via Microsoft Intune or comparable MDM platforms.

• Configure and oversee Microsoft Defender Attack Surface Reduction rules.

• Manage Microsoft Entra ID, Conditional Access, MFA, FIDO2, and passkeys.

• Establish and maintain a company-sanctioned password manager along with protections for privileged accounts.

• Deploy and manage web and DNS filtering solutions.

• Implement and oversee Data Loss Prevention controls through Microsoft Purview or similar tools.

• Maintain and enforce SPF, DKIM, and DMARC configurations.

• Create and manage an employee security awareness program that includes phishing simulations and training sessions.

• Develop and sustain incident response protocols for phishing, compromised accounts, malware, ransomware, data theft, and lost devices.

• Implement centralized security monitoring and alert systems across organizational platforms.

• Conduct vulnerability assessments, prioritize findings, coordinate remediation efforts, and oversee penetration testing activities.

• Facilitate compliance with ISO 27001, SOC 2, and HIPAA standards.

• Execute a comprehensive initial cybersecurity environment audit and present a phased security implementation plan that outlines priorities and costs.

⛳️ Requirements

• Demonstrated hands-on experience in implementing and managing Microsoft 365 security solutions, including Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Intune, and Microsoft Entra ID.

• Practical experience with EDR/XDR platforms such as CrowdStrike, SentinelOne, or comparable alternatives.

• Proven track record in preventing phishing attacks and Business Email Compromise (BEC).

• Knowledge of identity and access management, MFA, Conditional Access, and Zero Trust principles.

• Familiarity with Data Loss Prevention, DNS/web filtering, and SIEM/security monitoring.

• Experience in developing and implementing incident response procedures.

• Excellent verbal and written communication skills in English.

• Ability to articulate cybersecurity risks to non-technical stakeholders and provide training to employees.

• Capacity to work independently, take full ownership of issues until resolution, and prioritize tasks based on actual business risk.

• Familiarity with platforms such as CrowdStrike, SentinelOne, Abnormal Security, Cloudflare Gateway, Cisco Umbrella, Zscaler, or similar is a distinct advantage.

• Relevant certifications like CISSP, CEH, Microsoft Security certifications, or equivalent are considered beneficial.

• Full professional dedication during scheduled work hours; multiple concurrent employments are not allowed.

• Completion of all mandatory application questions is required.

• Must undertake the Emotional Intelligence and Wonderlic assessment upon submitting the application.

🏝️ Benefits

• Flexible part-time schedule.

• Opportunity for global/remote work arrangements.

• Inclusion of Emotional Intelligence and Wonderlic assessment in the evaluation process.

• Potential for a background check prior to hiring.