Job Title: Cybersecurity Program Manager
Job Classification: Exempt FullTime
Reporting Relationships: Nonsupervisory reports directly to Chief Information Officer
Work Location: Topeka KS
Who We Are:
FreeState is the largest rural electric cooperative in Eastern Kansas with more than 15000 memberowners. It functions as a democratic notforprofit organization. We are controlled by our members who actively participate in setting cooperative policy and making decisions in the best interest of the cooperative. Unlike investorowned utilities our profits are returned to our members as capital credits.
FreeState offers excellent benefits including:
- Generous pension plan
- 401(k) matched savings
- Medical dental and vision insurance paid for at 100 for individual coverage and 90 for family coverage
- Health savings account with an annual generous employer contribution
- Life insurance longterm disability paid time off benefits including paid holidays and so much more.
- Onthejob safety training professional development opportunities and an employee focused work culture.
- Relocation allowance available
Salary Range:
The designated salary range for this position is $87989 $131969. Starting wage is based on knowledge education and work experience.
Primary Accountability:
The Cybersecurity Program Manager (CPM) will support FreeState Electric Cooperatives (FreeStates) cybersecurity compliance efforts by assisting in the implementation and maintenance of security policies procedures and programs. The CPM will work under the direction of the Chief Information Officer (CIO) and collaborate closely with the IT Supervisor OT Supervisor and Government Contract Manager to ensure alignment with CMMC Level 2 and other relevant frameworks.
Additionally the CPM will coordinate extensively with FreeStates external managed service provider (MSP) and managed security service provider (MSSP) dedicated to CMMC compliance requirements. The position will also engage in cybersecurity functions across the broader organization contributing to the administration and security of a diverse array of technologies and systems.
This nonsupervisory role is ideal for a proactive individual with strong technical skills who is eager to contribute to the organizations security posture while working collaboratively with leadership and team members.
Essential Duties:
- Cybersecurity Policies: Maintains cybersecurity policies manages risk assessments and coordinates audits in compliance with CMMC Level 2 and other cybersecurity frameworks.
- Compliance: Coordinates with key stakeholders to maintain and organize detailed records of all cybersecurity activities policies procedures and compliance evidence for auditing and certification processes.
- Service Provider Coordination: Acts as the primary liaison with MSPs and MSSPs for compliance and security services. Tracks and assesses performance of service providers and addresses issues as needed.
- Asset & Configuration Management: Maintains asset inventories and system baselines and ensures secure system configurations. Works with Department Leadership to execute annual processes including creating analyzing and reviewing procedures.
- Risk & Vulnerability Management: Conducts risk assessments oversees vulnerability scanning and coordinates patch management.
- Security Monitoring & Incident Response: Reviews security logs investigates and responds to incidents (including after hours as needed) and manages security event integrations. Creates and maintains alerting rules for logging events to enable timely detection of security incidents and updates incident response plans as needed.
- Access Control & User Management: Develops implements and manages conditional access policies. Administers and oversees Microsoft security tools (PIM Conditional Access Purview).
- Security Tools & Platform Management: Administers DLP SIEM and IAM solutions and enhances security platforms.
- Training & Awareness: Conducts security training for employees and ensures policy adherence. Collaborates with HR to integrate cybersecurity training into onboarding processes.
- Reporting & Communication: Provides updates to leadership generates reports and tracks security metrics.
Marginal Duties:
- Cybersecurity Roadmap: Assists in developing a longterm cybersecurity roadmap to identify projects and initiatives; evaluates organizational needs and budgetary impacts.
- Continuing Education: Keeps abreast of the latest cybersecurity threats technologies and regulatory changes and informs Department Leadership of significant developments.
- Test Data Backup and Recovery: Coordinates with System Owners to verify the effectiveness of data backup and recovery processes for all IT and OT systems and reports findings.
Qualifications:
- Education & Experience: bachelors degree in computer science information security or related field is required. 35 years of cybersecurity experience is required.
- Certifications: CISSP Microsoft Certified: Cybersecurity Architect Expert or equivalent preferred. Having or obtaining CMMC Certified Professional (CCP) certification within 180 days is required.
- Technical Skills: Extensive experience with Microsoft 365 administration and security features is required. Experience with risk assessments vulnerability management and endpoint security is preferred. Experience with Microsoft Defender CrowdStrike and or Endpoint Privilege Management (EPM) is a plus.
- Soft Skills: Strong analytical communication and collaboration abilities with a proactive and adaptable mindset.
Physical Demands:
- Consistently sits for extended periods of time. Occasionally stands walks bends stoops squats lifts unpacks and moves up to thirty 30 pounds.
- Able to perform finger and hand manipulation and perform repetitive motions to use a computer keyboard and telephone as well as other office equipment.
- Able to read computer screens mail andtalk on the phone.
Work Environment:
- Professional and deadlineoriented environment involving both indoor and outdoor activities.
- May be exposed to outside weather conditions such as extreme cold/heat.
- Regular reliable attendance is required.
- Interaction with staff vendors and members.
- Must be able to report to their primary worksite after regular business hours as soon as possible in the event of an emergency situation such as electrical outages inclement weather etc.
- Ability to travel and attend meetings trainings workshops and seminars as directed.
How to Apply:
- to complete an Application for Employment.
- If you require reasonable accommodation to complete a job application preemployment testing a job interview or to otherwise participate in the hiring process please contact Melanie Eichman at 800.794.1989 or via email at
Disclaimer: The above information has been designed to indicate the general nature and level of work performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties responsibilities and qualifications required.
FreeState is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin age disability veteran status genetic information or any other protected characteristic under applicable law
Required Experience:
Manager