Senior Manager, Infrastructure & Cyber Security Engineering

Industry: Health & Wellness / E-Commerce
Employment Type: Full-Time
Level: Senior Manager
Department: Information Technology
Travel: Onsite as needed
Direct Reports: 5+

Position Overview

Our client, a leading health and wellness e-commerce organization, is seeking an experienced Senior Manager, Infrastructure & Cyber Security Engineering to provide strategic and operational leadership across enterprise infrastructure and cybersecurity.

This individual will own the multi-year infrastructure and cybersecurity roadmap and will be responsible for the architecture, reliability, security, scalability, and cost effectiveness of the organization's cloud and traditional infrastructure platforms.

The role has broad responsibility across AWS, Azure, Microsoft 365, identity and access management, enterprise networking, managed file transfer, desktop engineering, cybersecurity, Help Desk, disaster recovery, backup/recovery, observability, and IT service management.

A critical component of this position will be evaluating and advancing the organization's overall security posture. The ideal candidate must have hands-on experience assessing enterprise environments against CIS, ISO, NIST, and Zero Trust security principles, identifying security and control gaps, and developing actionable remediation and maturity roadmaps.

This is a senior leadership position requiring someone who can operate strategically with executives while maintaining enough technical depth to effectively challenge architectural decisions, evaluate security risks, guide engineering teams, and hold vendors and managed service providers accountable.

Key Responsibilities

Infrastructure & Cybersecurity Strategy

• Own and execute a multi-year infrastructure and cybersecurity strategy and roadmap aligned with company growth, operational resilience, security requirements, and enterprise architecture principles.
• Assess the organization's current security posture and technology environment against CIS Controls, ISO security frameworks, NIST frameworks, and Zero Trust security principles.
• Identify security, infrastructure, architecture, and control gaps and translate findings into prioritized remediation plans and maturity roadmaps.
• Establish measurable security and infrastructure standards, controls, service expectations, and executive-level metrics.
• Translate business strategy and enterprise risk priorities into funded technology programs and measurable outcomes.
• Partner with IT leadership, business stakeholders, Quality, Compliance, and cybersecurity partners to strengthen the organization's overall security and technology posture.

Cloud & Enterprise Infrastructure

• Provide enterprise leadership across AWS, Azure, Microsoft 365, Active Directory, identity and access services, networking, endpoint/client platforms, managed file transfer, and traditional infrastructure.
• Lead the design and governance of stable, secure, scalable, and extensible enterprise infrastructure architectures.
• Guide decisions involving topology, workload placement, cloud connectivity, identity, networking, endpoint platforms, and infrastructure modernization.
• Ensure infrastructure architecture and engineering decisions align with security requirements, business objectives, architectural principles, and total-cost expectations.
• Establish enterprise capabilities for monitoring, observability, automation, capacity management, availability, configuration management, incident management, problem management, and change management.
• Provide senior oversight of enterprise network architecture, capacity, resiliency, and connectivity across sites, cloud platforms, data centers, partners, and remote users.

Cybersecurity & Risk

• Lead the Cyber Security domain and ensure security principles are embedded across infrastructure, cloud, network, endpoint, identity, and operational services.
• Evaluate the enterprise environment against CIS, ISO, NIST, and Zero Trust principles, including the effectiveness and maturity of existing controls.
• Identify vulnerabilities, control deficiencies, architectural risks, and security maturity gaps and drive remediation efforts across internal teams and external partners.
• Establish and strengthen Zero Trust principles across identity, access, network, cloud, endpoint, and application environments.
• Partner with cybersecurity, Quality, Compliance, and business leaders on vulnerability management, access controls, security architecture, regulatory requirements, and validated-system controls.
• Ensure infrastructure services comply with applicable enterprise, regulatory, and corporate requirements, including PCI DSS, SOX, HIPAA, data privacy, ITGC, and validated-system controls.
• Ensure appropriate security evidence, risk documentation, exception management, and remediation plans are maintained.

Resilience, Disaster Recovery & Business Continuity

• Own infrastructure resilience and disaster recovery readiness for critical business services.
• Establish risk-based recovery priorities, recovery objectives, annual testing requirements, documented outcomes, and remediation plans.
• Establish and govern secure backup, replication, retention, and recovery capabilities.
• Ensure monitoring and testing processes demonstrate recoverability and identify potential weaknesses before they impact the business.
• Lead executive communication and response for material outages and major infrastructure incidents.
• Ensure major incidents receive rigorous root-cause analysis, corrective actions, and follow-through to reduce recurrence risk.

IT Governance & Service Management

• Lead ITSM / ITIL, ITGC, and cybersecurity best practices across the enterprise.
• Define service levels, operational health indicators, customer experience measures, and executive dashboards.
• Use operational trends, root-cause analysis, and performance data to drive investment priorities and continual improvement.
• Chair infrastructure architecture governance and oversee exceptions to approved technology and security standards.
• Ensure exceptions are appropriately risk assessed, documented, time bound, and supported by remediation plans.
• Build a culture of automation, standardization, continual improvement, and measurable service maturity.

Vendor, Financial & Operational Management

• Own strategic governance of infrastructure and cybersecurity vendors, including cloud, network, hosting, managed services, and systems integration partners.
• Hold third-party providers accountable for performance, security, risk, service levels, financial outcomes, and continual improvement.
• Develop and govern the annual infrastructure and cybersecurity budget and multi-year financial outlook.
• Optimize infrastructure spend and communicate investment priorities, tradeoffs, risks, and business value to senior leadership.
• Manage capacity, lifecycle, availability, and technology obsolescence planning across infrastructure domains.

Leadership & Team Development

• Lead, coach, and develop teams across Infrastructure Engineering, Cyber Security, and Help Desk services.
• Build a scalable operating model with clear roles, decision rights, accountability, staffing plans, succession coverage, and sourcing strategies.
• Assess organizational capabilities and identify talent, skill, and coverage gaps.
• Recruit, retain, mentor, and develop high-performing technical professionals and leaders.
• Establish clear performance expectations, development plans, and succession strategies.
• Lead distributed internal teams and external service partners through organizational change, major incidents, and multi-year modernization initiatives.

Required Experience & Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related discipline, or equivalent industry experience.
• 10+ years of progressive enterprise infrastructure, cloud, architecture, cybersecurity, or IT operations experience.
• 7+ years of people and organizational leadership experience.
• Significant experience leading and governing complex hybrid infrastructure environments.
• Strong experience across technologies and domains such as AWS, Azure, Microsoft 365, Active Directory/identity, enterprise networking, observability, automation, ITSM, backup/recovery, and managed services.
• Demonstrated experience assessing an organization's security posture against CIS Controls, ISO security frameworks, NIST frameworks, and Zero Trust security principles.
• Proven ability to conduct or lead security maturity assessments and gap analyses, identify control deficiencies, prioritize risk, and develop actionable remediation roadmaps.
• Strong understanding of Zero Trust architecture and security principles, particularly across identity, access, network, endpoint, and cloud environments.
• Experience working within environments subject to security, regulatory, and compliance requirements such as PCI DSS, SOX, HIPAA, data privacy, ITGC, and validated-system controls.
• Demonstrated success advising executives and leading enterprise infrastructure and/or cybersecurity portfolios, transformation programs, budgets, vendors, and geographically distributed teams.
• Experience leading teams and service partners through major incidents, organizational change, security improvements, and multi-year modernization programs.
• Strong understanding of enterprise architecture, infrastructure resilience, disaster recovery, vulnerability management, access controls, and cybersecurity risk.
• Hands-on experience architecting, building, and operating cloud platforms is strongly preferred.
• Experience developing and implementing enterprise technology and security standards, policies, controls, and governance processes.
• Proven experience building and developing high-performing multidisciplinary technical teams.

Leadership & Professional Competencies

• Ability to balance security, resilience, scalability, cost, speed, and business priorities when making technology decisions.
• Strong business, financial, operational, security, and technical acumen.
• Exceptional communication skills with the ability to present complex infrastructure, cybersecurity, risk, and financial topics to both technical and non-technical executives.
• Strong influencing skills and emotional intelligence with the ability to gain alignment across technical teams, business stakeholders, and executive leadership.
• Excellent critical thinking, analytical, and problem-solving capabilities.
• Ability to operate effectively in an environment with changing business needs, technologies, risks, and priorities.
• Strong talent-management capabilities, including coaching, mentoring, performance management, succession planning, and team development.
• Comfortable operating with broad autonomy and making decisions within established strategy, budget, risk, and governance parameters.

Ideal Candidate Profile

The ideal candidate is a senior infrastructure leader with meaningful cybersecurity depth, rather than someone whose background is exclusively infrastructure operations or exclusively governance/compliance.

They should be able to assess an enterprise environment through the lens of CIS, ISO, NIST, and Zero Trust, identify where the organization has meaningful security or architectural gaps, and then lead the technical and organizational changes necessary to close those gaps.

At the same time, this individual must have the infrastructure depth to credibly lead teams responsible for cloud, networking, identity, Microsoft 365, disaster recovery, endpoint services, ITSM, cybersecurity, and enterprise infrastructure operations while effectively communicating strategy, risk, and investment priorities to executive leadership.