IT Governance & Cybersecurity Manager

Rather than maintaining a large internal IT department, we partner with external Managed Service Providers (MSPs) to support our infrastructure, systems, and day-to-day technology operations.

As our organization continues to grow, we’re looking to bring on an experienced IT Governance & Cybersecurity Manager to take ownership of our technology strategy, oversee cybersecurity risks, and manage our external IT partners.

This is a newly created position offering the opportunity to work directly with executive leadership, establish scalable IT governance practices, and influence how technology supports our business moving forward.

Why join us?

Newly created leadership position with the opportunity to build and shape the company’s IT strategy.

Direct exposure to executive leadership and influence over business-critical technology decisions.

Take ownership of cybersecurity risk management, IT governance, and technology planning.

Lead and manage relationships with external MSPs, cybersecurity providers, and technology vendors.

Develop a long-term technology roadmap supporting continued business growth.

Oversee IT budgets, vendor contracts, technology investments, and cost optimization initiatives.

Work in a lean, collaborative environment with significant autonomy and decision-making responsibility.

Opportunity to establish processes, improve security practices, and build a scalable technology governance framework., We are seeking an experienced IT Governance & Cybersecurity Manager to lead our organization’s technology strategy, cybersecurity risk management, and external IT service provider relationships.

This individual will serve as the primary internal technology leader, ensuring our IT infrastructure, cybersecurity practices, vendor partnerships, and technology investments align with business objectives.

The ideal candidate will bring a combination of IT operations experience, cybersecurity knowledge, vendor management, and business acumen. This position requires someone who can independently evaluate technical recommendations, manage external service providers, and communicate technology risks and opportunities directly to executive leadership.

Responsibilities:

IT Strategy & Governance: Develop and oversee the organization’s overall IT strategy and long-term technology roadmap. Establish IT governance policies, procedures, standards, and accountability measures. Evaluate existing technology systems, identify gaps, and recommend improvements. Serve as the primary technology advisor to executive leadership. Establish and track KPIs related to technology performance, cybersecurity, vendor accountability, and IT spending. Align technology investments with business objectives, operational efficiency, and future growth.

Cybersecurity & Risk Management: Own the organization’s cybersecurity risk management program. Identify, assess, prioritize, and monitor cybersecurity threats and technology-related risks. Oversee security controls related to identity and access management, endpoint protection, cloud security, and data protection. Coordinate vulnerability assessments, security reviews, and third-party risk assessments. Develop and maintain incident response, disaster recovery, and business continuity plans. Evaluate cybersecurity insurance requirements and applicable security obligations. Track remediation activities and communicate security risks to executive leadership. Establish employee cybersecurity awareness and training initiatives.

Managed Service Provider & Vendor Management: Serve as the primary point of contact and accountability for external IT service providers, MSPs, and cybersecurity vendors. Manage vendor relationships, contracts, service-level agreements (SLAs), and performance expectations. Evaluate MSP performance, responsiveness, and service delivery. Review proposed technology purchases, infrastructure upgrades, and cybersecurity solutions. Challenge vendor recommendations when necessary to ensure technical and financial alignment. Identify opportunities to improve service delivery, consolidate vendors, and reduce unnecessary expenses. Ensure external providers maintain appropriate documentation, security standards, and operational continuity.

IT Budgeting & Cost Management: Develop, manage, and monitor the annual IT budget. Analyze technology spending across software licensing, cloud services, managed services, cybersecurity tools, and infrastructure. Identify opportunities for cost savings and technology optimization. Evaluate return on investment for proposed technology initiatives. Partner with Finance and executive leadership on budgeting, forecasting, and vendor negotiations. Provide regular reporting on technology expenditures and financial performance.

Technology Operations & Business Support: Oversee the organization’s cloud environments, business applications, networking, endpoints, and identity management systems. Ensure external IT providers are effectively supporting employees and resolving technical issues. Coordinate technology requirements associated with company growth, acquisitions, and office expansions. Partner with business stakeholders to evaluate new software platforms and technology solutions. Support automation initiatives while ensuring appropriate cybersecurity and governance standards. Maintain oversight of technology assets, licensing, system documentation, and vendor access.

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience. 7+ years of progressive experience in IT operations, infrastructure management, IT governance, cybersecurity, or related technology functions. Experience managing external IT service providers, MSPs, or outsourced IT environments. Demonstrated experience developing or significantly contributing to IT strategy and technology planning. Strong understanding of cybersecurity risk management, security controls, vulnerability management, and incident response. Experience managing IT budgets, vendor contracts, software licensing, and technology spending. Working knowledge of cloud environments, identity and access management, endpoint security, networking, and IT infrastructure. Ability to evaluate technical recommendations and hold external providers accountable. Strong communication skills with the ability to present technology risks, costs, and recommendations to executive leadership. Comfortable operating independently in a lean organization., Experience in real estate investment, private equity, financial services, or another data-sensitive business environment. Familiarity with NIST Cybersecurity Framework, CIS Controls, or ISO 27001. Experience with Microsoft 365, Microsoft Entra ID, Azure, or Intune. Experience with cybersecurity insurance assessments, vendor security evaluations, and third-party risk management. Certifications such as CISSP, CISM, CRISC, CISA, Security+, or ITIL. Experience supporting business growth, acquisitions, or operational expansion. Familiarity with cybersecurity and governance considerations involving AI-enabled business applications.

Salary: $120,000 - $148,500 per year