Cybersecurity Manager

Welcome to a better way, an authentic way. Welcome to Nature’s Way.

We believe that nature is the best way to holistic health, and it should be available to everyone.

When we help people live healthy lives, we build a happier, healthier world for everyone.

How we go about our work drives TRUST in who we are, what we do, and the products we produce. 

Our customers trust: 

• Our products to be the gold standard
• Our words to be true
• Our claims to be honest,
• Our actions to have integrity.

And we’ve been leading the way since 1969.

Be a part of helping people live healthy lives as our new Cybersecurity Manager.

SUMMARY
The Cybersecurity Manager leads the day-to-day execution and continual improvement of the enterprise Cyber Security program. This role manages security operations, vulnerability management, incident response, risk reduction, compliance and audit readiness, security awareness, third-party security services, and the operational use of Microsoft security capabilities. The manager works across IT, business teams, and service providers to implement security controls, coordinate remediation, improve detection and response workflows, and strengthen the organization’s security posture while supporting the broader security strategy established by the Director of Cyber Security and IT Operations.

ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties may be assigned.

• Lead execution and continual improvement of the enterprise Cyber Security program, translating security strategy, policies, standards, and priorities into operational plans. 
• Manage vulnerability management activities, including identification, prioritization, coordination of remediation, and reporting of technology risks. 
• Lead day-to-day security operations and monitoring, including investigation, escalation, response, documentation, and follow-up for security events and incidents. 
• Coordinate incident response activities across IT domains and business functions and support post-incident reviews and corrective actions. 
• Maintain audit and assessment readiness by coordinating documentation, evidence collection, control validation, findings response, and remediation tracking. 
• Support security risk assessments and third-party/vendor security reviews and coordinate mitigation of identified risks. 
• Partner with IT, Legal, Operations, Compliance, and other business teams on cross-functional security initiatives and remediation activities. 
• Promote security awareness and compliance through communication, education, and support of organization-wide security programs. 
• Support the implementation of Operation’s security capabilities such as identity and access management, privileged access, endpoint protection, vulnerability management, and email/web security. 
• Own the implementation and operation of security capabilities such as logging and monitoring, SIEM/SOAR, and data protection. 
• Manage third-party security operations center (SOC) and other security service providers, including service levels, analyst performance, alert quality, portal access, escalation paths, incident coordination, actionable reporting, backup coverage, and continuous improvement. 
• Lead the design, development, testing, governance, and continual improvement of security incident response and remediation tools, workflows, automation rules, playbooks, integrations, and reporting to improve detection, triage, containment, recovery, and corrective action while minimizing unintended operational impact. 
• Oversee the operational configuration, integration, data quality, alerting, and policy alignment of Microsoft security capabilities, including Defender XDR, Defender for Endpoint, Defender for Cloud, Sentinel, Entra ID, Purview, and supporting data connectors. 
• Establish and govern least-privilege administrative access, privileged identity management, separate administrative accounts, role elevation, and access review practices for security and technology platforms. 
• Maintain and improve security policies, processes, procedures, standards, knowledge articles, incident records, and lessons learned to support consistent execution, audit readiness, and organizational knowledge. 
• Help establish and maintain secure configuration, patching, hardening, and technical control standards across infrastructure, applications, endpoints, and cloud environments. 
• Provide clear security metrics, risk information, recommendations, and status updates to IT leadership and relevant stakeholders. 
• Evaluate emerging threats, technologies, and security practices and recommend practical improvements. 
• Mentor and develop Cyber Security staff, provide technical and operational guidance, establish priorities, and foster accountability and continuous improvement. 
• Must have excellent verbal and written communication skills and the ability to interact professionally with executives, managers, auditors, partners, and subject matter experts. 
• Must be highly self-motivated, detail-oriented, collaborative, and able to operate effectively in a fast-paced environment. 

• Progressive experience in cybersecurity, information security, or closely related IT roles, including experience leading security initiatives and providing guidance to other security professionals. 
• Working knowledge of security frameworks and best practices such as NIST CSF, ISO/IEC 27001/27002, and CIS Controls. 
• Experience with vulnerability management, security monitoring, incident response, identity and access management, endpoint security, logging/SIEM, data protection, secure configuration, and patch management. 
• Experience supporting internal or external security audits, assessments, evidence collection, remediation, and compliance activities. 
• Knowledge of enterprise infrastructure and cloud technologies, including Microsoft Azure and Microsoft 365 security environments, is highly desirable. 
• Hands-on experience designing, maturing,  implementing, administering, tuning, and integrating the Microsoft security suite, including Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft Sentinel, Microsoft Entra ID and Privileged Identity Management, Microsoft Purview, Microsoft Intune security controls, and related Microsoft 365 and Azure security capabilities. 
• Experience designing and governing security automation, including Microsoft Sentinel automation rules and playbooks, Logic Apps, alert enrichment, notifications, data connectors, workflow integrations, and automated response actions. 
• Experience managing third-party SOC or managed security service providers, including service-level oversight, escalation, quality review, access dependencies, performance reporting, and vendor coordination. 
• Ability to assess technical risk, translate findings into practical remediation plans, and communicate risk to technical and non-technical stakeholders. 
• Relevant security certifications such as CISSP, CISM, or Microsoft security certifications are preferred. 
• Commitment to continuous professional development and staying current with emerging technologies, threats, and security practices. 

Medical Option to select either a PPO plan or one of 2 high – deductible medical plans that includes a company contribution to your personal health savings bank account.

Dental Delta Dental PPO & an option to select an enhanced dental plan.

Vision Routine preventative coverage under medical plan and an option to elect additional voluntary coverage

Time Off All employees receive 11 holidays off per year, as well as paid time off that starts at a minimum of two weeks per year.

401K Plan Company match of up to 4% as long as employees contribute a minimum of 6% to the account. An additional profit-sharing contribution is also made to employee accounts if the company meets its annual targets.

You’ll also enjoy a variety of other benefits that support your long-term health and wellness:

• Company provided short-term & long-term disability
• Life and AD&D insurance
• Flexible spending accounts
• Voluntary critical illness & accident coverage
• New parent phase-in program & paternity leave
• Educational assistance reimbursement
• Product discounts & a wellness program

Start Helping People live Healthy lives today!

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)