> Markdown version of [/jobs/ext/3757276-senior-manager-it-security-and-risk-management](https://www.wearedevelopers.com/jobs/ext/3757276-senior-manager-it-security-and-risk-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Manager, IT Security and Risk Management - **Company:** Reworld Holding Corporation - **Location:** Florham Park, NJ, United States - **Experience:** Expert - **Salary:** $136,600.0 - $195,300.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Configuration Management, Cyber Security, Information Systems, Continuous Integration, Information Leak Prevention, Data Loss, Linux, Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Python (Programming Language), Key Management, Network Security, Windows PowerShell, Remote Access Technology, Cloud Services, Application Data, Security Information and Event Management, Software Vulnerability Management, Data Logging, Scripting, Computer Networking Systems, Enterprise Software Applications, Network Access Control, Cloud Platform System, Large Language Models, Software Security, Cyber Threat Analysis, Firewalls (Computer Science), Information Technology, Cloud Migration, Network Server, Security Orchestration, Automation & Response - **Published:** October 15, 2026 - **Apply:** https://diversityjobs.com/career/18637005/Senior-Manager-It-Security-Risk-Management-New-Jersey-Florham-Park ## About the Role * 7+ years of progressive cybersecurity or infrastructure security experience, including hands-on work in incident response, detection engineering, vulnerability management, network security, or cloud security. * Demonstrated success operating or materially improving a risk-based vulnerability or exposure management program in a complex enterprise environment. * Strong investigation skills across endpoint, identity, network, cloud, email, and application data, with experience preserving evidence and documenting defensible conclusions. * Engineering experience with SIEM, EDR/XDR, vulnerability and attack-surface management, enterprise firewalls, secure remote access, cloud-native controls, and security automation. * Experience securing hybrid environments that include Microsoft 365, Azure or AWS, SaaS applications, Windows and Linux systems, enterprise networks, and cloud services. * Familiarity with OT/ICS security and working knowledge of application, API, container, infrastructure-as-code, CI/CD, data protection, and AI/LLM security risks. * Scripting or automation capability using Python, PowerShell, Bash, APIs, SOAR, or configuration-management tools, plus strong communication skills and the ability to explain technical risk in clear business terms. Preferred Qualifications * Bachelor's degree in cybersecurity, computer science, engineering, information systems, or equivalent practical experience. * Relevant certification such as CISSP, GCIH, GCIA, GSEC, GICSP, CCSP, cloud or network security, or an equivalent credential. * Experience in industrial, energy, waste, manufacturing, utility, or another high-availability operational environment, including support for NERC CIP, SOX, privacy, or comparable control frameworks. * Experience conducting security reviews for acquisitions, SaaS platforms, cloud migrations, or AI-enabled solutions. ## Description The Senior Manager, IT Security and Risk Management is a hands-on technical leader responsible for advancing Reworld's NIST-aligned security roadmap across enterprise, cloud, and operational technology environments. The role leads vulnerability and exposure management, threat detection, incident response, network and cloud security, OT resilience, and secure adoption of application and AI technologies. Working across Security, IT, OT, Legal, GRC, and business teams, this position strengthens technical controls, supports compliance requirements, and translates cyber risk into clear business decisions. Key Responsibilities Vulnerability and Exposure Management * Lead and continuously improve the risk-based vulnerability and exposure management program, including scanning coverage, asset attribution, prioritization, remediation timelines, exceptions, and validation of closure. * Prioritize risk using exploitability, external exposure, attack paths, asset criticality, business impact, and compensating controls; partner with technology and OT owners to drive remediation and escalate overdue risk. * Coordinate penetration tests and external attack-surface reviews, verify corrective actions, and report coverage, aging, remediation performance, trends, and residual risk to technical and executive audiences. Threat Detection, Security Monitoring and Incident Response * Develop and tune detections across endpoint, identity, network, cloud, application, email, and OT telemetry using threat intelligence and attacker behaviors. * Lead incident triage, technical investigation, containment, recovery, evidence preservation, root-cause analysis, and post-incident review in coordination with internal teams and external partners. * Maintain and test incident-response playbooks for ransomware, identity compromise, data loss, third-party, cloud, and OT scenarios; use automation and AI-assisted analysis to improve alert quality and investigation speed with appropriate human validation. Network, Cloud and Platform Security * Design and improve network security across enterprise and industrial environments, including firewalls, segmentation, secure remote access, network access control, internet egress, third-party connectivity, and resilient architecture. * Assess and strengthen security across Azure, AWS, SaaS, servers, containers, infrastructure as code, and enterprise platforms, including encryption, secrets management, logging, monitoring, workload protection, and secure administrative access. * Embed secure architecture reviews, configuration baselines, validation, dependency scanning, and security testing into CI/CD and change processes; support M&A discovery and remediation of inherited assets, identities, exposures, and control gaps. Operational Technology and Resilience * Extend security visibility, monitoring, access control, vulnerability management, and incident response into OT and industrial control environments while respecting safety and availability requirements. * Assess IT/OT convergence, remote and vendor access, segmentation, industrial protocols, and compensating controls; help validate backup integrity, restoration procedures, recovery dependencies, and corrective actions from resilience testing. AI, Data and Application Security * Assess security risks in enterprise applications and AI solutions, including models, agents, prompts, data sources, plugins, connectors, APIs, and third-party services, and recommend proportionate controls. * Partner with Data Protection, Privacy, Legal, and business teams to implement AI governance guardrails, reduce data leakage risk, and strengthen preventive controls for sensitive information.