Cybersecurity Manager

Location: South Shore of Boston About Our Client Our client is a well-established regional property and casualty insurance company headquartered south of Boston, and a perennial "Best Places to Work" honoree. They offer flexible work arrangements, competitive salaries and benefits, and strong investment in employee growth, including on-site fitness and wellness resources, tuition assistance, mentorship, and professional development programs.

The Opportunity: Our client is seeking a highly experienced, technically proficient Cybersecurity Manager to lead day-to-day security operations and ensure consistent execution of key cybersecurity initiatives. This role is best suited for a hands-on leader with broad, real-world experience across cybersecurity technologies and domains. The ideal candidate has a proven track record of running security operations, improving processes, and driving remediation efforts to completion, and will bring structure, accountability, and follow-through to the team while aligning with frameworks such as NIST and CIS.

Key Responsibilities: Security program operations: Oversee core security functions, including security monitoring, vulnerability management, identity and access management, endpoint protection, and network security, making sure tools and processes are functioning effectively and delivering meaningful results. Security Operations (Sec Ops):Own monitoring, detection, and response across the environment using SIEM, EDR, and network-based detection platforms. Tune detections to reduce noise, make alerts actionable, establish consistent triage, investigation, and response processes, and strengthen incident response practices. Execution: Own a prioritized body of work including vulnerability remediation, audit findings, and control improvements. Bring structure to ongoing efforts, identify where work is stalling, and drive initiatives to completion with measurable outcomes. Frameworks and audit: Align security practices with NIST and CIS in a practical, sustainable way, translate framework requirements into real-world controls, and support audit activities. Cloud and application security: Partner with infrastructure and engineering teams to ensure appropriate controls across cloud platforms, SaaS environments, and internally developed or supported applications. People leadership: Build and maintain a high-performing team through mentoring, technical development, and clear performance expectations; assess skill gaps and position the team for current and near-term priorities.

Required Qualifications: 7+ years of cybersecurity experience with strong hands-on technical depth across multiple domains, including 3+ years in a leadership role Broad, practical experience with SIEM, EDR, vulnerability management and scanning tools, IAM/PAM solutions, and network security platforms Experience with cloud security (Azure, AWS, or GCP) and familiarity with application security practices Demonstrated ability to drive remediation efforts and operational work to completion Experience aligning security controls to frameworks such as NIST or CIS in a practical, operational way Proven experience managing, mentoring, and developing team members

Preferred Qualifications: Experience with tools such as Rapid 7, Microsoft E5 Security (Defender, Entra ID, Purview), Darktrace, Cyber Ark, and Palo Alto Experience in regulated environments such as financial services or insurance Background in audit support and remediation management Relevant certifications such as CISSP, CISM, or equivalent Compensation The estimated salary range for this position is approximately $160,000 to $180,000, based on skills, experience, certifications, and other factors, plus a comprehensive benefits package.