> Markdown version of [/jobs/ext/4024922-it-security-manager](https://www.wearedevelopers.com/jobs/ext/4024922-it-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Manager - **Company:** City and County of Broomfield - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $132,308.0 - $179,026.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Microsoft Online Services, Business Software, Software as a Service, Cloud Computing, CompTIA Security+, Cyber Security, Information Leak Prevention, Supervisory Control and Data Acquisition (SCADA), Infrastructure as a Service (IaaS), Identity and Access Management, Information Security Management, IT Management, Network Architecture, Platform as a Service (PAAS), PCI Data Security Standards, Azure Active Directory, TCP/IP, Google Cloud, Cloud Platform System, Mttr, Multi-Cloud, National Institute of Standards and Technology Cybersecurity Framework, Information Technology - **Published:** October 30, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=57451e9ec6203993 ## About the Role * Degree from an accredited college or university with a bachelor's degree in cybersecurity, computer science, computer information systems, management information systems, or a closely related field. * Educational or industry-recognized vocational training in information security, cloud computing (AWS/Azure/GCP), identity management, system and network architecture, database administration, and IT service management. * Current professional certification in Information Security Management or Leadership (i.e. CISM, CISSP, CISA, etc.) is highly desired. * Secondary or specialized certifications (e.g., CCSP, GIAC GSLC/GCIH, CompTIA Security+) and ITIL Foundation (v3 or v4) certification are highly preferred. Experience * Six (6) years of progressive experience in cybersecurity, network engineering, or systems administration, to include a minimum of two (2) years of direct supervisory, team lead, or project leadership experience. * Experience resolving complex security challenges in a large, geographically distributed, departmentally diverse, or public-facing organization. * Hands-on experience securing hybrid environments, Software as a Service (SaaS), cloud infrastructure (AWS, Azure, or Google Cloud), and Microsoft ecosystem solutions including Active Directory and Microsoft Entra ID (Azure AD). * Demonstrated experience conducting security risk assessments, executing incident response protocols, and applying regulatory compliance standards (e.g., NIST CSF, CJIS, PCI-DSS, HIPAA) in a public sector or highly regulated environment. * Extensive experience with TCP/IP network security, endpoint detection and response (EDR), and identity/access management. Years of related experience may be substituted for required education, however education cannot be substituted for the necessary work experience. Candidates must meet the minimum required years of work experience. NECESSARY SPECIAL REQUIREMENTS (in addition to above requirements): New hires must, as a condition of employment, pass the following pre-offer and post-offer/hire processes: in-person or virtual interviews, reference checks, and background checks, which may include local police check and sex-offender registry. If this position is required to drive a CCOB vehicle a DMV check will be required. * Must be 18 years of age. * Must possess and maintain a valid driver's license and safe driving record for continued employment. * Fingerprint checks through CBI/FBI required. ## Description As IT Security Manager, you will help shape Broomfield's cybersecurity strategy, strengthen our security posture, and lead efforts to identify and manage evolving cyber risks. You will join a collaborative and mission-driven IT organization where cybersecurity is viewed as both a technology priority and an organizational responsibility., * Build and lead an effective cybersecurity team by providing guidance, coaching, and technical mentorship to staff, developing annual performance plans and conducting annual evaluations. * Maintain an inclusive work climate which attracts, retains, and motivates a diverse staff of high-performing technology professionals. * Oversee security requirements, risk assessment, controls, and monitoring for multi-cloud environments (SaaS, IaaS, PaaS), hybrid enterprise infrastructure, and line-of-business applications. * Lead, conduct, and maintain security business, infrastructure, and regulatory compliance reviews (NIST CSF 2.0, CJIS, PCI-DSS, HIPAA) and perform ongoing quantitative and qualitative security risk assessments for internal and external information assets. * Establish and enforce a formal Third-Party Risk Management (TPRM) program to evaluate, audit, and monitor vendor security controls and software supply chain risks prior to contract execution and deployment. * Establish and enforce enterprise AI security governance by evaluating artificial intelligence (AI) and generative technologies against the NIST AI Risk Management Framework, deploying defensive AI-driven security tools, and maintaining Data Loss Prevention (DLP) controls to mitigate data privacy, compliance, and threat risks across municipal systems. * Serve as an enterprise security authority reviewing and approving security controls for network, applications, operating systems, identity management, and endpoint protection solutions for new and upgraded services. * Formulate, maintain, and enforce enterprise cybersecurity policies, procedures, and technical standards that balance business functionality with a comprehensive defense-in-depth security posture. * Maintain domain specific knowledge, skills, and industry certifications, staying current with modern cybersecurity management standards, local government compliance mandates, and evolving threat vectors. * Investigate known and unknown security threats and incidents, oversee threat hunting activities, document findings, and drive cross-functional remediation plans. * Lead the development, maintenance, and execution of the CCOB Cybersecurity Incident Response Plan (IRP), including leading tabletop exercises, managing external incident response partners, and coordinating with CISA or law enforcement agencies when necessary. * Analyze threat intelligence feeds to determine risk, exposure, and mitigation strategies. * Represent CCOB as an information security subject matter expert and liaison to outside agencies, regional peer groups, and regulatory bodies. * Oversee city-wide security awareness training to cultivate a strong security-first culture among all employees and officials. * Drive security automation across security workflows and incident response tools to eliminate manual overhead and reduce mean time to detect/respond (MTTD/MTTR). * Evaluate emerging cyber technologies, cloud architectures, and security solutions, incorporate into the cybersecurity strategic plan, develop budget justification, lead vendor negotiations, and procurement process. * Collaborate with IT leadership and stakeholders to evaluate, prioritize, and report enterprise cybersecurity risk metrics, strategic initiatives, and budget needs. * Oversee protection and continuous monitoring strategies for 1,500+ hybrid endpoints, mobile devices, operational technology (OT/SCADA), and critical infrastructure systems.