Cybersecurity Manager

Leads cybersecurity at Forbes as a hands-on engineering manager, protecting both the corporate technology environment and the company's consumer-facing digital platforms. The role reports to the Vice President, Corporate Technology, manages a small distributed team of onshore staff and offshore contractors, and is hybrid from the Jersey City headquarters two to three days a week, for candidates living in the New York area.

The manager is the governance lead for cybersecurity across the organisation, setting standards and policy, managing projects and contractor deliverables, supporting PCI and other audits, preparing vendor security reviews with Legal, reporting risk metrics, and serving as the designated HIPAA Security Officer. On the corporate side the role runs SSO and MFA, identity lifecycle and privileged access, EDR, firewalls and cloud networking, email security and phishing defence, and leads incident investigations. On the web side it covers cloud network controls for Forbes' digital properties, source code, secrets and CI/CD pipeline security, the vulnerability management programme, and governance of third-party scripts and other client-side protections, working with Engineering, QA and Product to build security into development.

Forbes wants seven or more years in cybersecurity spanning cloud, infrastructure, network or security engineering, experience leading security engineers including offshore contractors, strong identity and access knowledge, scripting and automation skills, PCI audit experience and practical use of AI in security work. CISSP, CCSP, CISM, Security+ or GIAC are preferred, and HIPAA experience helps.