Department: Information Technology
Employment Type: Full-Time
Requisition ID: 2164
Date Posted: November 4, 2026
Closing Date: November 18, 2026 oruntil filled
Position Summary:Reporting to the
Director, Cyber Security & Infrastructure, the
Senior Manager, Cyber Security leads UFA's Cyber Security team and is accountable for the day-to-day delivery and continuous improvement of UFA's cybersecurity operations and defensive capabilities. Areas of responsibility include security operations, digital forensics and incident response, threat intelligence, vulnerability management, identity threat protection, and security engineering.
This role requires a strong combination of technical expertise and people leadership, with the ability to provide technical direction, engage with IT and business leaders, make informed decisions, and drive results through a high-performing cybersecurity team.
Responsibilities:- Lead and develop the cybersecurity team through clear expectations, coaching, delegation, performance management, recruitment, succession planning, and a culture of accountability and continuous learning.
- Own day-to-day cybersecurity operations, including monitoring, threat detection, investigation, incident response, digital forensics, vulnerability management, and operational effectiveness across enterprise environments.
- Contribute to the development and continuous improvement of UFA's cybersecurity strategy, roadmap, and governance framework, ensuring alignment with business objectives, regulatory requirements, and industry best practices.
- Drive disciplined execution of UFA's cybersecurity roadmap by establishing clear accountabilities, milestones, performance measures, and regular progress reviews to deliver measurable risk reduction and operational improvements.
- Oversee and continuously improve UFA's cyber defense capabilities across cloud, identity, endpoints, networks, wireless, and IoT/OT environments through effective security engineering, threat intelligence, detection technologies, and automation.
- Lead significant cybersecurity incidents, providing clear operational command, directing containment and recovery activities, coordinating cross-functional response efforts, communicating with executive stakeholders, and ensuring timely escalation of material risks and decisions beyond delegated authority.
- Partner with business and technology leaders to assess and manage cybersecurity risks, balancing security requirements with business priorities through appropriate risk mitigation, compensating controls, and formal risk acceptance processes.
- Manage security service providers, vendors, and technology investments; communicate actionable performance metrics, operational risks, priorities, and recommendations to leadership.
- Other duties as required.
Qualifications:- Post-secondary education in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education and experience.
- Minimum 10 years of progressive cybersecurity experience, including demonstrated experience directly managing technical teams, with accountability for recruitment, performance management, employee development, operational effectiveness, and delivery of measurable business outcomes
- Demonstrated success leading cybersecurity operations or closely related security functions, with firsthand accountability for operational performance, incident response, and cross-functional coordination.
- Proven track record of delivering cybersecurity programs and operational improvements through others, with concrete examples of prioritization, delegation, performance accountability, overcoming obstacles, and measurable results.
- Strong technical judgment across security operations, threat detection and response, vulnerability management, security engineering, cloud and identity security, and modern attack techniques; able to challenge technical recommendations without needing to perform all implementation personally.
- Strong working knowledge of Microsoft Azure and Microsoft 365 security, including relevant capabilities such as Defender XDR, Sentinel, Entra ID, Defender for Cloud, and Purview; ability to integrate controls across hybrid environments.
- Understanding of enterprise network security, including next-generation firewalls (Palo Alto experience an asset), segmentation, wireless, remote access, and IoT/OT security.
- Demonstrated ability to assess security and business impact, identify practical compensating controls, distinguish technical decisions from business risk acceptance, and escalate significant issues at the right time.
- Effective leadership, communication, stakeholder influence, and conflict resolution skills, with evidence of coaching, developing talent, making difficult decisions, and collaborating with business and technology leaders.
- Working knowledge of recognized security frameworks and practices, including NIST CSF, CIS Controls, ISO 27001, and MITRE ATT&CK.
Assets:- Professional certifications such as CISSP, CISM, GIAC, or relevant Microsoft security certifications.
- Experience with managed security service providers, security automation, incident response exercises, and AI security governance.
- Experience securing distributed, business-critical environments, including retail, industrial, IoT/OT, or other operational technology environments.
