Cybersecurity Manager

At Builders Mutual, we believe in the power of teamwork to get the job done right. Every day, our team delivers comprehensive commercial insurance and trusted safety solutions to protect and advance the unique needs of the contractor community. Rooted in teamwork, inclusion, expertise, and community, we work together to serve better, achieve more, and build lasting impact.

The OPPORTUNITY:

Leverage your experience and join our team as the Cybersecurity Manager. This position leads the enterprise Cybersecurity program, providing the vision and strategy needed to protect the confidentiality, integrity, and availability of electronic information. Reporting to the Director of IT Shared Services, with a direct line to the Head of IT and senior leadership to communicate risk, this role partners with IT Operations & Infrastructure, Service Desk, Production Support, DevOps, and AS400 support so that security is built into operations, release, and environment management. The Cybersecurity Manager leads the Cybersecurity team, sets the annual security roadmap, establishes and monitors security policies and standards, and aligns security strategy with business goals, with a focus on risk reduction, regulatory compliance, and operational efficiency. Because the success of our company is rooted in teamwork, the way we care about the people we work with and serve, this hybrid role will work in our Raleigh office a minimum of two days with the flexibility to work from home the remaining three days. 

Your WORK as the Cybersecurity Manager will make a difference as you:  

• Lead and manage the Cybersecurity team, including workload management, performance management, training, succession planning, cross-training, and employee development, fostering a culture of ownership and continuous improvement.

• Establish and maintain a strategically sound Cybersecurity Program, based on internal risk analysis, that protects the confidentiality, integrity, and availability of customer, vendor, employee, and business information. Oversee and coordinate all information security efforts, serve as process owner for ongoing security activities, and evaluate, select, and drive implementation of security standards and risk management programs, ensuring consistency with the regulatory and compliance requirements that govern the organization, including but not limited to PCI, NAIC, GLBA, SOX, HIPAA, NIST, ISO, ITIL, and Federal/State directives.
• Define security policies, practices, and standards that govern security functions associated with information technology systems, networks, applications, data communications, and computing services, including employee, vendor, and customer use of and access to information.
• Implement, monitor, and manage security controls across cloud and hosted environments, infrastructure, and network, in partnership with IT Shared Services to support stability and resilience.
• Partner with IT Shared Services to develop effective disaster recovery and business continuity policies and standards, including backup and restore; coordinate the development of implementation plans and procedures to ensure that business-critical services are recovered in the event of a declared disaster and provide direction and in-house consulting in these areas.
• Identify, evaluate, and report on information security risks, practices, and projects. Work directly with departments to facilitate IT risk analysis and risk management, identify acceptable levels of risk, and establish roles and responsibilities for information classification and protection. Use security metrics (e.g., incident trends, vulnerability remediation, and response times) to drive continuous improvement and to communicate risk to the Sr. Director, Head of IT, and senior leadership.
• Lead strategic security planning with IT Operations & Infrastructure, Service Desk, Production Support, DevOps, AS400 support, Application Development, and other departments. Partner with the Sr. Director, IT Shared Services, and IT leadership to define the annual cybersecurity roadmap and advise management on security-related technical and operational matters, including security considerations for modernizing legacy platforms such as AS400.
• Create and manage information security and risk management awareness training programs for employees, contractors, and approved system users.
• Lead enterprise security incident response, including detection, escalation, containment, root cause analysis, and post-incident review, in coordination with the Service Desk and Production Support under established ITSM practices.
• Integrate security into change management, release, and DevOps practices (e.g., secure development lifecycle, vulnerability management, and access reviews) so that fast, reliable releases do not increase risk.
• Evaluate and recommend security tools and automation; manage security vendor and managed service relationships; and provide budget input to the Sr. Director for the combined IT Shared Services and Cybersecurity budget.

Qualifications**

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent combination of education and experience), plus a minimum of 5 – 7 years’ experience in a combination of risk management, information security, and Information Technology positions demonstrating progressive growth in responsibility. Includes 4+ years’ experience as an information security engineer and 1+ years’ experience performing penetration testing of network, application, and IT resources.
• Demonstrated understanding of technological trends and developments in the areas of information security, risk management, web architectures, and cloud computing
• Excellent written, verbal, and presentation skills, with the demonstrated ability to frame security and risk-related concepts for technical and nontechnical audiences, including executives.
• Professional information security certifications such as CompTIA Security+, SSCP, CISSP, CISM, CCNA Security, CCNP Security, CEH, GIAC, or CISA required.
• In-depth knowledge of IT technologies including Cybersecurity best practices, Routing & Switching in LAN/WAN architectures, WLAN, Radius, Firewalls, SSO/SAML, SaaS/Cloud Services, Identity Access Management, SDLC, Microsoft Technologies (Active Directory, IIS, ISA, DNS, SQL), Linux.
• Knowledge and direct experience incorporating ISO 27002, NIST Cybersecurity Framework, and other security control frameworks and standards.
• Working knowledge of ITSM/ITIL and DevOps practices.
• Knowledge and direct experience with vulnerability management, SIEM and Log Management, file integrity, proxy servers, DLP, IPS/IDS, VPN, PKI, multiple-factor authentication, cryptography.
• Strong analytic, management, organizational, collaboration, and problem-solving skills, with proven ability to manage multiple priorities in a fast-paced environment with minimal supervision.

Your Employee Experience at Builders Mutual: 
At Builders Mutual, we’re intentional about creating a workplace where people can do meaningful work, feel supported by leaders who care, and grow their careers with confidence. Great workplaces don’t just happen — they’re built with intention. You’ll also be part of a team where people show up as themselves, support one another, and take pride in what we’re building together. 
 
We support you with: 

• Competitive compensation and a performance bonus program 

• 3 weeks of PTO to start, plus your birthday off 

• A 37.5-hour workweek, with Fridays ending at 2:30 PM 

• Professional development through Builders University 

• Everyday Wins recognition with swag and extra time off 

• 8 paid Volunteer Time Off (VTO) hours to give back 

• Comprehensive benefits that support your wellbeing today and your future tomorrow