Cybersecurity Manager

SBC Small Business Consulting

. Execute the organization’s risk-based cybersecurity strategy .

Posted 10/9/2026full-timeSan Francisco • California • United StatesMid-LevelSenior💰 $135,696 - $180,902 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in executing risk-based cybersecurity strategies, overseeing incident response, and ensuring compliance with regulatory standards. Proficient in developing secure IT architectures and implementing advanced security tools across hybrid and multi-cloud environments.

Highest-signal resume keywords

Cybersecurity Strategy ExecutionIncident Response ManagementCloud Security FrameworksCompliance Standards KnowledgeTeam Leadership and Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentsVulnerability AssessmentsPenetration TestingSecurity Incident ResponseSystems HardeningSecure Network DesignEncryption TechnologiesSecurity Policy DevelopmentThreat IntelligenceSecurity Monitoring

Soft Skills

Communication of Security ConceptsMentoring Cybersecurity Teams

Tools & Technologies

SIEM SystemsNGFWsXDREDRWAFMicrosoft Defender for CloudMicrosoft SentinelSOAR FrameworksThreat-Hunting ToolsCybersecurity Dashboards

Certifications & Qualifications

CISSP

Industry Keywords

Zero Trust ArchitectureDefense in DepthFedRAMPNISTISO 27001GDPRHIPAAPCI DSS

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Execute the organization’s risk-based cybersecurity strategy
Establish, enforce, and improve security policies, standards, and procedures
Lead security incident response, including triage, investigation, containment, recovery, log analysis, endpoint analysis, network analysis, and digital forensics
Develop, test, and maintain incident response plans
Run tabletop and recovery exercises
Collaborate with internal teams and external partners to integrate security across operations
Develop cybersecurity dashboards for executives and IT teams
Oversee secure IT architecture design and implementation
Automate security monitoring and incident response workflows using SOAR frameworks
Oversee security monitoring and analytics through SIEM and threat-hunting tools
Conduct risk and vulnerability assessments and implement remediation strategies
Ensure compliance with applicable regulatory and industry security and privacy standards
Oversee encryption solutions and timely security patches and updates
Conduct security awareness training
Research, evaluate, and implement advanced security tools and emerging technologies
Maintain documentation of security policies, procedures, and incidents
Execute cloud security strategy for hybrid and multi-cloud solutions
Report cybersecurity risks, status, and improvement initiatives to senior management
Oversee assigned infrastructure services
Supervise, coach, and develop technical staff
Manage security and infrastructure vendors
Lead the State Bar’s cybersecurity program and protect its hybrid technology environment

Requirements

What you’ll need

Bachelor’s degree in computer science, Cybersecurity, or a related field (or equivalent experience)
Minimum of five (5) years of experience in IT security
Minimum of three (3) years of supervisory or team-lead experience
Experience with IT infrastructure operations is highly desirable
Knowledge of cybersecurity tools and technologies, including NGFWs, XDR, EDR, WAF, and SIEM systems
Knowledge of secure system and network design principles, including Zero Trust Architecture and Defense in Depth
Knowledge of cloud security frameworks and tools, including Microsoft Defender for Cloud, Microsoft Sentinel, and CIS Cloud Controls
Knowledge of encryption technologies and secure data handling practices
Knowledge of systems hardening principles and practices
Knowledge of compliance frameworks and regulatory security and privacy standards, including FedRAMP, NIST, ISO 27001, GDPR, HIPAA, and PCI DSS
Knowledge of incident response frameworks, risk assessments, vulnerability assessments, penetration testing, and threat intelligence
Ability to oversee security technologies and assigned infrastructure operations
Ability to design and implement secure networks and systems
Ability to interpret and apply compliance frameworks and regulatory standards
Ability to analyze and resolve security incidents
Ability to communicate complex security concepts to technical and non-technical audiences
Ability to mentor and develop cybersecurity teams
Professional certifications such as CISSP or equivalent are a plus but not required

Benefits

Comp & perks

Allows up to four days of remote work per week
DEI-focused workplace committed to fairness, dignity, and respect
Values include Investing in Our People, Growth Mindset, and Excellence