IT Governance & Cybersecurity Manager

IT Governance & Cybersecurity Manager

$120000 - $148500 per year | Raleigh, NC | On-site | Permanent

Build and Lead IT Strategy for a Growing Private Equity Firm | Own Cybersecurity, Technology Governance & MSP Relationships!

A bit about us:

We are a growing real estate investment and private equity firm operating in a fast-paced environment where technology, cybersecurity, and operational efficiency play an increasingly important role in our business.

Rather than maintaining a large internal IT department, we partner with external Managed Service Providers (MSPs) to support our infrastructure, systems, and day-to-day technology operations.

As our organization continues to grow, we're looking to bring on an experienced IT Governance & Cybersecurity Manager to take ownership of our technology strategy, oversee cybersecurity risks, and manage our external IT partners.

This is a newly created position offering the opportunity to work directly with executive leadership, establish scalable IT governance practices, and influence how technology supports our business moving forward.

Why join us?

Newly created leadership position with the opportunity to build and shape the company's IT strategy.

Direct exposure to executive leadership and influence over business-critical technology decisions.

Take ownership of cybersecurity risk management, IT governance, and technology planning.

Lead and manage relationships with external MSPs, cybersecurity providers, and technology vendors.

Develop a long-term technology roadmap supporting continued business growth.

Oversee IT budgets, vendor contracts, technology investments, and cost optimization initiatives.

Work in a lean, collaborative environment with significant autonomy and decision-making responsibility.

Opportunity to establish processes, improve security practices, and build a scalable technology governance framework.

Job Details

We are seeking an experienced IT Governance & Cybersecurity Manager to lead our organization's technology strategy, cybersecurity risk management, and external IT service provider relationships.

This individual will serve as the primary internal technology leader, ensuring our IT infrastructure, cybersecurity practices, vendor partnerships, and technology investments align with business objectives.

The ideal candidate will bring a combination of IT operations experience, cybersecurity knowledge, vendor management, and business acumen. This position requires someone who can independently evaluate technical recommendations, manage external service providers, and communicate technology risks and opportunities directly to executive leadership.

Responsibilities:

IT Strategy & Governance:

Develop and oversee the organization's overall IT strategy and long-term technology roadmap.

Establish IT governance policies, procedures, standards, and accountability measures.

Evaluate existing technology systems, identify gaps, and recommend improvements.

Serve as the primary technology advisor to executive leadership.

Establish and track KPIs related to technology performance, cybersecurity, vendor accountability, and IT spending.

Align technology investments with business objectives, operational efficiency, and future growth.

Cybersecurity & Risk Management:

Own the organization's cybersecurity risk management program.

Identify, assess, prioritize, and monitor cybersecurity threats and technology-related risks.

Oversee security controls related to identity and access management, endpoint protection, cloud security, and data protection.

Coordinate vulnerability assessments, security reviews, and third-party risk assessments.

Develop and maintain incident response, disaster recovery, and business continuity plans.

Evaluate cybersecurity insurance requirements and applicable security obligations.

Track remediation activities and communicate security risks to executive leadership.

Establish employee cybersecurity awareness and training initiatives.

Managed Service Provider & Vendor Management:

Serve as the primary point of contact and accountability for external IT service providers, MSPs, and cybersecurity vendors.

Manage vendor relationships, contracts, service-level agreements (SLAs), and performance expectations.

Evaluate MSP performance, responsiveness, and service delivery.

Review proposed technology purchases, infrastructure upgrades, and cybersecurity solutions.

Challenge vendor recommendations when necessary to ensure technical and financial alignment.

Identify opportunities to improve service delivery, consolidate vendors, and reduce unnecessary expenses.

Ensure external providers maintain appropriate documentation, security standards, and operational continuity.

IT Budgeting & Cost Management:

Develop, manage, and monitor the annual IT budget.

Analyze technology spending across software licensing, cloud services, managed services, cybersecurity tools, and infrastructure.

Identify opportunities for cost savings and technology optimization.

Evaluate return on investment for proposed technology initiatives.

Partner with Finance and executive leadership on budgeting, forecasting, and vendor negotiations.

Provide regular reporting on technology expenditures and financial performance.

Technology Operations & Business Support:

Oversee the organization's cloud environments, business applications, networking, endpoints, and identity management systems.

Ensure external IT providers are effectively supporting employees and resolving technical issues.

Coordinate technology requirements associated with company growth, acquisitions, and office expansions.

Partner with business stakeholders to evaluate new software platforms and technology solutions.

Support automation initiatives while ensuring appropriate cybersecurity and governance standards.

Maintain oversight of technology assets, licensing, system documentation, and vendor access.

Qualifications:

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.

7+ years of progressive experience in IT operations, infrastructure management, IT governance, cybersecurity, or related technology functions.

Experience managing external IT service providers, MSPs, or outsourced IT environments.

Demonstrated experience developing or significantly contributing to IT strategy and technology planning.

Strong understanding of cybersecurity risk management, security controls, vulnerability management, and incident response.

Experience managing IT budgets, vendor contracts, software licensing, and technology spending.

Working knowledge of cloud environments, identity and access management, endpoint security, networking, and IT infrastructure.

Ability to evaluate technical recommendations and hold external providers accountable.

Strong communication skills with the ability to present technology risks, costs, and recommendations to executive leadership.

Comfortable operating independently in a lean organization.

Preferred Qualifications:

Experience in real estate investment, private equity, financial services, or another data-sensitive business environment.

Familiarity with NIST Cybersecurity Framework, CIS Controls, or ISO 27001.

Experience with Microsoft 365, Microsoft Entra ID, Azure, or Intune.

Experience with cybersecurity insurance assessments, vendor security evaluations, and third-party risk management.

Certifications such as CISSP, CISM, CRISC, CISA, Security+, or ITIL.

Experience supporting business growth, acquisitions, or operational expansion.

Familiarity with cybersecurity and governance considerations involving AI-enabled business applications.

Jobot is an Equal Opportunity Employer. We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot’s policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions.

Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance.

Information collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal.

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Jobot, and/or its agents and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here: jobot.com/privacy-policy