Department: Information Technology
Employment Type: Full-Time
Requisition ID: 1863
Date Posted: June 25, 2026
Closing Date: July 9, 2026 oruntil filled
Position Summary:Reporting to the
Director, Cyber Security & Infrastructure, the
Sr. Manager, Cyber Security is responsible for leading UFA's cybersecurity program and advancing the organization's cyber defense capabilities. This role manages UFA cybersecurity capabilities end-to-end, including security operations, threat detection and response, digital forensics, threat intelligence, vulnerability management, security architecture, cyber defense technologies, and the continuous improvement of operational security processes and controls.
Responsibilities:- Lead and develop UFA's Cyber Security team by providing strategic direction, coaching, performance management, succession planning, and talent development to build a high-performing cybersecurity function.
- Oversee Cyber Security Operations including threat monitoring, detection, investigation, incident response, digital forensics, and vulnerability management to protect UFA's information assets and business operations.
- Drive continuous improvement of cyber defense capabilities through the implementation and optimization of security technologies, automation, threat intelligence, threat hunting, and security analytics.
- Provide operational leadership during cybersecurity incidents, coordinating response activities, stakeholder communications, containment efforts, recovery actions, and post-incident reviews.
- Partner with business and technology leaders to identify, assess, and mitigate cybersecurity risks while ensuring security requirements are integrated into enterprise initiatives and operational processes.
- Contribute to the development and execution of UFA's cybersecurity strategy, roadmap, and governance framework, ensuring alignment with business objectives, regulatory requirements, and industry best practices.
- Manage cybersecurity vendors, service providers, technology investments, ensuring solutions and services effectively support organizational security objectives and operational requirements.
- Develop and communicate cybersecurity metrics, reporting, and risk insights to leadership, providing actionable recommendations that support informed decision-making and continuous improvement of UFA's security posture.
- Other duties as required.
Qualifications:- A post-secondary diploma in a relevant field or equivalent combination of education and experience. Professional certifications such as CISSP, CISM, GIAC (GCIH, GCIA, GCFE, GCFA), Microsoft Security certifications (SC-100, SC-200), AZ-500, or equivalent are considered strong assets
- 10+ years of progressive cybersecurity experience, including at least 4 years leading cybersecurity operations, security engineering, incident response, threat management, or related cybersecurity functions in a complex enterprise environment.
- Expert knowledge of cybersecurity operations, threat detection and response, digital forensics, threat intelligence, vulnerability management, security analytics, automation, network security, and risk-based security practices.
- Expert knowledge of Microsoft security technologies including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, Microsoft Defender for Cloud, Microsoft Purview, Data Loss Prevention (DLP), and related Microsoft security capabilities.
- Strong execution and delivery focus, with a proven ability to lead cross-functional initiatives, drive operational excellence, remove obstacles, hold teams accountable, and successfully deliver cybersecurity programs, projects, and continuous improvement initiatives.
- Strong leadership experience building, developing, and managing high-performing technical teams, including coaching, performance management, succession planning, and talent development.
- Working knowledge of cybersecurity frameworks and standards, including NIST Cybersecurity Framework (CSF), CIS Controls, ISO 27001, and MITRE ATT&CK.
- Strong understanding of cloud security principles and architectures, particularly within Microsoft Azure environments, as well as identity-centric and Zero Trust security models.
- Strong understanding of enterprise network security architectures and technologies, including next-generation firewalls, network segmentation, wireless security, secure remote access, IoT/OT security, and network threat detection and response.
- Outstanding communication, stakeholder management, and relationship-building skills, with the ability to translate complex technical concepts and risks into clear business-focused recommendations.
- Strong analytical, problem-solving, and decision-making skills, including the ability to assess cybersecurity risks and develop effective mitigation strategies.
