Cybersecurity Manager

Maricopa County9 months ago
Phoenix, AZ, United States
On-site
Full-time
Junior Level (1-3 years)

Job Description

Position Overview

The Cybersecurity Manager helps identify risk to the Judicial Branch and makes recommendations on compensating/mitigating security controls to reduce overall cyber risk to a level that is acceptable to the organization. This position will be the primary point of contact for all cybersecurity matters for the Judicial Branch and will manage the Security analysts within the department. About The Superior Court: The Superior Court of the Judicial Branch of Arizona in Maricopa County is dedicated to providing a safe, fair and impartial forum for resolving disputes, enhancing access to our services, and providing innovative, evidence-based practices that improve the safety of our community and ensure the public’s trust and confidence in the Judicial Branch. The Superior Court in Maricopa County, one of the largest, most innovative and progressive trial courts in the nation, seeks innovative individuals to join our team who will embrace our vision of excellence and the principles inherent in the Rule of Law...every person, every day, every time. We fulfill these principles through a culture that values fairness, respect, integrity, innovation, and safety.

Key Responsibilities

  • Lead the Judicial Branch cybersecurity program, including strategy, operations, governance, and compliance
  • Manage and mentor cybersecurity staff and ensure clear roles and expectations
  • Oversee security operations including monitoring, incident response, vulnerability management, and threat intelligence
  • Direct response to security incidents and coordinate remediation, forensics, and post-incident reviews
  • Establish and maintain cybersecurity policies, standards, and procedures aligned with adopted frameworks
  • Oversee third-party security risk assessments for vendors and service providers
  • Ensure compliance with CJIS and other applicable regulatory requirements
  • Partner with business stakeholders to align controls and share intelligence
  • Develop and deliver a cybersecurity awareness program
  • Develop and deliver a cybersecurity training program
  • Define and report to key stakeholders KPIs relevant to security posture
  • Maintain and test incident response, disaster recovery, and business continuity security components
  • Guide security architecture decisions for on-premise and cloud platforms
  • Evaluate emerging threats and technologies and recommend improvements
  • Perform additional duties and advanced initiatives as assigned based on organizational needs, maturity, and strategic direction

Required Qualifications

  • Education: Bachelor’s degree in Computer Science or related field
  • Experience Required: Six (6) years of information security or IT risk management experience
  • Qualifications: Two (2) years of supervisory or management experience with understanding of enterprise infrastructure capabilities and application development
  • Experience with following: NIST, CSF, NIST SP 800-53, CJIS, and ISO 27001
  • An equivalent combination of post-secondary education and job-related experience may substitute on a year-for-year basis

Preferred Qualifications

  • Eight or more years in a cybersecurity leadership or senior security roles
  • Experience leading security programs in complex, regulated environments
  • Strong background in governance, risk, and compliance for cloud and SaaS platforms
  • Professional certification such as CISSP, CISM, or similar
  • Knowledge of enterprise cybersecurity program management
  • Security operations oversight including SIEM, SOAR, EDR, and vulnerability management
  • Understanding of Zero-Trust security principles
  • Experience in identity and access management
  • Knowledge of cloud security architecture and shared responsibility models
  • Experience in third-party and supply chain risk management
  • Familiarity with regulatory compliance including CJIS, HIPAA, and state or federal security requirements
  • Ability to translate cyber risk into business impact for executive audiences
  • Strong leadership and staff development skills
  • Program and portfolio management across multiple initiatives
  • Experience with policy development and governance leadership
  • Proven incident leadership and decision-making under pressure
  • Excellent written and verbal communication skills for technical and non-technical stakeholders
  • Ability to lead enterprise-wide cybersecurity initiatives from strategy through execution
  • Capability to direct incident response coordination and executive communications
  • Experience in evaluating, selecting, and overseeing security technologies and service providers
  • Ability to establish metrics and dashboards to measure security posture and risk trends
  • Experience partnering with IT, legal, audit, HR, and other business leaders to manage risk

Required Skills

Policy Development and Implementation
Governance, Risk, and Compliance (GRC)
Security Operations and Monitoring
Team Leadership and Staff Development
Third-party and Supply Chain Risk Management
Cybersecurity Program Management
Vulnerability Management
Knowledge of NIST Frameworks and ISO 27001
Risk Assessment and Mitigation
Incident Response and Forensics