Cybersecurity Manager

Join Our Team at HuFriedyGroup – Innovating Excellence in Dental Instrument Manufacturing HuFriedyGroup is a leading manufacturer of dental instruments and infection prevention products. Our 10,000-plus products, hand-crafted by highly skilled artisans, are known for their precision, performance, longevity, reliability, and quality. To help dental professionals be The Best in Practice, HuFriedyGroup provides a unique combination of world class products, value-added services, clinical education, and dental community platforms that result in superior clinician performance and enhanced safety for dental professionals and their patients. Working at HuFriedyGroup is so much more than a job, as every employee has a part in driving and supporting the organization’s inspirational vision to be a global force in advancing dental performance through Best-In-Practice dentistry that improves lives around the world.

About this Role:

HuFriedyGroup is seeking a Cybersecurity Manager to lead and advance the company's global cybersecurity program. The organization has established a solid foundation of cybersecurity controls, including privileged access management, security awareness initiatives, CIS Controls alignment, and incident response capabilities. As HuFriedyGroup expands its digital ecosystem through eCommerce, customer portals, AI-enabled solutions, and additional digital services, cybersecurity must evolve beyond infrastructure protection to support secure business growth and customer trust. The Cybersecurity Manager serves as the organization's senior cybersecurity leader and primary point of accountability for cybersecurity strategy, governance, risk management, and security operations. Reporting directly to the Chief Digital Officer, this role will be responsible for maturing the cybersecurity program, embedding security into customer-facing solutions, leading cybersecurity governance efforts, and establishing the company's AI security and governance framework. This role requires a combination of technical expertise, business acumen, leadership capability, and the ability to work effectively across technology, commercial, and operational functions.

Key Responsibilities

Cybersecurity Strategy & Governance

• Develop and maintain the company's cybersecurity strategy, roadmap, and investment priorities.
• Lead cybersecurity governance, policies, standards, and risk management processes.
• Maintain cybersecurity programs aligned with CIS Controls and support broader frameworks including NIST CSF, ISO 27001, SOC 2, and other applicable standards.
• Establish and maintain enterprise cybersecurity risk assessment and risk reporting processes.
• Present cybersecurity risks, program status, and strategic recommendations to executive leadership and the Board.
• Manage cybersecurity budgets, technology investments, and external security partners.

Security Assurance, Compliance & Risk Management

• Lead penetration testing initiatives, vulnerability assessments, and remediation planning.
• Manage cybersecurity audits, compliance assessments, and control validation activities.
• Partner with Internal Audit, Finance, Legal, and Technology teams on security and compliance requirements.
• Develop and oversee third-party risk management processes for vendors, software providers, and strategic partners.
• Support cyber insurance assessments and renewal activities.

Security Operations & Incident Response

• Maintain and continually improve the incident response program and cyber incident response playbooks.
• Coordinate response activities during cybersecurity incidents and conduct executive tabletop exercises.
• Oversee vulnerability management, privileged access management, endpoint security, email security, and security monitoring programs.
• Continue development of security awareness and phishing prevention initiatives.
• Partner with global IT teams to promote consistent cybersecurity controls and practices.

Application & Digital Platform Security

• Embed security requirements into the delivery lifecycle for eCommerce, customer portals, websites, AI-enabled solutions, and other customer-facing platforms.
• Conduct security architecture reviews and threat modeling activities.
• Establish secure development and application security testing standards.
• Support customer identity and access management strategies.
• Lead security requirements associated with payment platforms and eCommerce solutions.
• Ensure privacy and data protection considerations are incorporated into solution design and implementation.

AI Governance & Security

• Lead development and ongoing management of the company's AI governance framework and AI acceptable-use policies.
• Define security, privacy, and risk controls related to AI technologies and AI-enabled business processes.
• Partner with technology teams to establish practical governance processes and implementation standards.
• Monitor emerging AI regulations, standards, and industry guidance to ensure organizational readiness.

M&A Security & Value Protection

• Support cybersecurity due diligence activities related to acquisitions.
• Assess cybersecurity risks, integration requirements, and remediation plans for acquired entities.
• Maintain cybersecurity documentation and evidence to support future diligence and transaction activities.
• Establish programs to monitor external security posture and emerging cybersecurity risks.

Customer Security & Trust

• Lead responses to customer security assessments, security questionnaires, and due diligence reviews.
• Develop and maintain customer-facing security documentation and trust materials.
• Partner with commercial teams to address customer security requirements and requests.
• Support future security certification and attestation initiatives as business needs evolve.

Qualifications

Required

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent professional experience.
• 6-10 years of progressive cybersecurity experience.
• Minimum of 3 years leading or managing a cybersecurity program, function, or major security initiative.
• Experience implementing and maintaining cybersecurity programs based on recognized frameworks such as CIS Controls and NIST CSF.
• Demonstrated experience managing penetration testing, security assessments, audits, and remediation programs.
• Experience securing cloud, SaaS, web application, and customer-facing technology environments.
• Working knowledge of identity and access management, privileged access management, and cybersecurity governance practices.
• Experience developing security policies, standards, and procedures.
• Experience leading incident response activities and managing third-party security providers.
• Strong communication and presentation skills with the ability to translate technical risks for executive audiences.

Preferred

• CISSP and/or CISM certification strongly preferred.
• Experience supporting PCI DSS environments and eCommerce platforms.
• Experience with AI governance, AI security, or responsible AI frameworks.
• Experience in healthcare, medical device, dental, life sciences, or regulated manufacturing environments.
• Experience in private equity-backed organizations.
• Experience supporting mergers, acquisitions, and integration activities.
• Familiarity with DevSecOps methodologies and application security testing tools.
• Experience supporting SOC 2 readiness or enterprise customer security assessments.

Success Profile

The successful candidate will:

• Demonstrate strong ownership of the cybersecurity program and roadmap.
• Balance risk management with business enablement and innovation.
• Build credibility with executive leadership and cross-functional stakeholders.
• Effectively influence teams and partners without direct authority.
• Communicate complex cybersecurity and AI-related risks in clear business terms.
• Drive measurable improvements in cybersecurity maturity, operational resilience, and customer trust.
• Foster a culture of continuous improvement, accountability, and security awareness throughout the organization.

Base Salary: $150,000–$180,000 annually, based on experience, qualifications, and role level. Our comprehensive benefits package includes medical, dental and vision options, 401(k), life insurance, tuition reimbursement, paid family leave, competitive PTO, annual bonus opportunities, and more.

Equal Employment Opportunity & Accessibility Statement HuFriedyGroup is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We prohibit discrimination and harassment of any kind based on race, color, religion, age, gender, national origin, disability status, genetics, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. If you require reasonable accommodations to apply for a position, participate in the recruitment process, or perform essential job functions, please contact us at 773-868-5534. We are committed to supporting you throughout your journey with HuFriedyGroup!