Senior Manager, Cybersecurity & Infrastructure - Remote (within the U.S.)

About The Role:

The Senior Manager of Cybersecurity & Infrastructure is a hands-on role accountable for devising and implementing VentureWell’s cybersecurity strategy to safeguard assets and technologies across all business units. Collaborating with senior management, executives, and third-party vendors, the candidate will ensure VentureWell's cybersecurity programs meet business needs while mitigating cyber and data risks. This role entails maintaining processes and technologies to uphold acceptable cyber risk levels and deliver secure, innovative solutions aligned with the organization's cybersecurity strategy.

This role will report to the Director of Information Technology.

Responsibilities:

Cybersecurity (70% of time) 

• Perform threat response, vulnerability management, vulnerability testing, risk analyses, and security assessments
• Collaborate with business unit IT teams to develop, maintain, and conduct tabletop reviews of a corporate cybersecurity incident response plan
• Develop a vendor management strategy to ensure information security requirements are included in contracts
• Lead designing and administering cybersecurity awareness program & training
• Establish a metrics framework and perform regular reporting to measure the efficiency of the cybersecurity program
• Work with internal IT team members to ensure security measures in application and platform development

People Management & Internal Collaboration (30% of time)

• Manage two full-time employees (an IS Security Analyst and Systems Engineer) and develop performance measures and growth plans
• Drive positive outcomes through accountability, successfully navigating challenging situations and having difficult conversations as needed
• Form strong relationships and partnerships both internally across the organization and externally with vendors to collaboratively drive outcomes

What You Bring:

• At least 3 years of people management experience is required.
• At least 7 years of IT experience with at least 5 of those years in information security domains is required.
• Significant experience working with anti-malware solutions, intrusion prevention …