Sign upLog in
See more jobs

Cybersecurity Program Manager

Granite Construction
  • Watsonville, California
    29 days ago

    Job Description

    Building a career at Granite may be the most valuable thing you could do...

    Find your dream job today, and be part of something great. Our most powerful partnership is the one we have with our employees. Our people are our most valued asset and the foundation of Granite's century-old success. We're building more than infrastructure; we are building your future.

    General Summary

    This position leads the company's cybersecurity program, overseeing security operations and reporting while identifying and addressing risks across the organization. The role prioritizes and drives initiatives to reduce or eliminate cybersecurity threats.

    Essential Job Accountabilities
    • Lead the Information Technology (IT) organization in developing a comprehensive cybersecurity risk profile across the enterprise to ensure the company's IT infrastructure is secure and resilient
    • Oversee cybersecurity controls and risk management practices across cloud platforms, including Microsoft 365, Azure, SaaS applications, identity systems, and hybrid environments, to protect critical systems and data
    • Implement selected cybersecurity frameworks and publish standards to drive consistent practices and ensure enterprise-wide compliance
    • Align the cybersecurity program with regulatory and industry requirements (e.g., FARS/DFARS, NIST CSF & 800-171, CMMC, FedRAMP, CCPA) to maintain compliance and reduce legal and operational risk
    • Partner with IT Delivery and Infrastructure teams to develop and enforce best practices and procedures that strengthen cybersecurity controls and reduce vulnerabilities
    • Prioritize cybersecurity initiatives in collaboration with IT Delivery and Infrastructure teams to ensure timely mitigation of identified risks
    • Develop and manage the incident response plan for cyber events to enable effective, coordinated, and timely responses to security incidents
    • Develop and report metrics, KPIs, and KRIs to IT Steering, executive leadership, and the Board of Directors to demonstrate program effectiveness and secure ongoing support
    • Develop and communicate the cybersecurity roadmap across the enterprise to build awareness, alignment, and sponsorship for key initiatives
    • Lead cybersecurity awareness and training programs to ensure employees understand and can recognize and respond to cyber threats
    • Manage the security operations function to monitor, detect, and respond to vulnerabilities and cyber threats, ensuring timely mitigation and protection of company assets
    • Develop and maintain a third-party cybersecurity risk management program to evaluate and validate vendor security practices and ensure partners meet company standards
    • Manage the cybersecurity budget by allocating resources effectively and advocating for investments needed to address emerging threats and support program priorities

    Education
    • Bachelor's degree in Computer Science, Information Systems, or a related field required
    • Professional certification in cybersecurity or information security, such as CISSP or CISM

    Work Experience
    • 10+ years of progressive cybersecurity management experience
    • 15+ years of hands-on cybersecurity experience

    Knowledge, Skills, and Abilities
    • Demonstrated expertise in managing cybersecurity and security operations functions
    • Advanced knowledge of the cybersecurity threat landscape, including emerging threats, attack vectors, and mitigation strategies
    • Advanced knowledge of IT systems, tools, and infrastructure, with the ability to stay current on new and evolving technologies
    • In-depth knowledge of cybersecurity solutions and services in the market, including evaluation and selection of vendor offerings
    • Proficiency in cybersecurity frameworks (e.g., NIST, ISO 27001), including implementation and compliance alignment
    • Experience developing and executing cybersecurity roadmaps and budget forecasts, with measurable alignment to business objectives
    • Strong persuasive reasoning and influencing skills, with the ability to drive decision-making across stakeholders
    • Customer-focused mindset, with the ability to deliver responsive, solutions-oriented service to internal and external stakeholders
    • Advanced verbal and written communication skills, including the ability to clearly and concisely present complex technical information to non-technical audiences
    • Ability to operate effectively in dynamic, evolving environments, including influencing and motivating without direct authorit

    Numbers & Facts

    LocationWatsonville, California

    Skills

    • Best Practicesunmatched
    • Budget Forecastingunmatched
    • Budget Managementunmatched
    • CISM - Certified Information Security Managerunmatched
    • CISSP - Certified Information Systems Security Professionalunmatched
    • Cloud Computingunmatched
    • Communication Skillsunmatched
    • Computer Scienceunmatched
    • Computer Securityunmatched
    • Customer Relationsunmatched
    • Defense Federal Acquisition Regulations Supplement (DFARS)unmatched
    • Establish Prioritiesunmatched
    • Event Managementunmatched
    • ISO (International Organization for Standardization)unmatched
    • Incident Responseunmatched
    • Information Technology & Information Systemsunmatched
    • Information/Data Security (InfoSec)unmatched
    • Internet Securityunmatched
    • Leadershipunmatched
    • Legalunmatched
    • Maintain Complianceunmatched
    • Market Analysisunmatched
    • Metricsunmatched
    • Microsoft Windows Azureunmatched
    • Multiplatform/Cross-Platformunmatched
    • Operations Managementunmatched
    • Performance Metricsunmatched
    • Persuasion Skillsunmatched
    • Presentation/Verbal Skillsunmatched
    • Program Evaluationunmatched
    • Project/Program Managementunmatched
    • Regulationsunmatched
    • Reporting Skillsunmatched
    • Resource Managementunmatched
    • Riskunmatched
    • Risk Analysisunmatched
    • Risk Managementunmatched
    • Security Attacksunmatched
    • Security Monitoringunmatched
    • Software as a Service (SaaS)unmatched
    • Technical Deliveryunmatched
    • Technical Leadershipunmatched
    • Technical Presentationunmatched
    • Time Managementunmatched
    • Training Programunmatched
    • U.S. National Institute of Standards and Technology (NIST)unmatched
    • Vehicle Drivingunmatched
    • Vendor/Supplier Evaluationunmatched
    • Vendor/Supplier Selectionunmatched
    • Writing Skillsunmatched

    Be found by employers

    5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Free resume builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Free resume builder