Senior Manager, Cybersecurity & Risk - SavATree

Status: Full-Time / Permanent Location: Remote Department: Information Technology Reports To: Director, Infrastructure & Operations Salary: $125,000-$150,000 per year, dependent on skillset and experience

SavATree is seeking a highly capable, hands-on cybersecurity leader to help strengthen and mature our enterprise cybersecurity program as the company continues to scale. This role will serve as the enterprise lead responsible for cybersecurity operations, risk management, policy development, incident readiness, and security architecture across a distributed, field-based organization. Reporting to the Director, Infrastructure & Operations, this highly visible individual contributor role will partner closely across IT and the business to strengthen cybersecurity capabilities, reduce enterprise risk, and improve overall security posture. The role will work across infrastructure, applications, cloud, identity, data, and third-party environments to help ensure scalable and resilient cybersecurity practices. The ideal candidate is technically strong, pragmatic, and comfortable operating in a lean environment where they will both define and help execute cybersecurity priorities. This individual must be capable of operating independently, influencing across teams, and helping build scalable cybersecurity capabilities that balance risk reduction with business enablement.

• Serve as the enterprise cybersecurity lead responsible for cybersecurity operations and risk management across infrastructure, endpoints, identity, cloud, applications, data, and third-party environments.
• Partner closely with Infrastructure & Operations to strengthen endpoint security, vulnerability management, patching, identity and access management, logging, monitoring, and incident detection and response capabilities.
• Provide technical cybersecurity leadership across Microsoft, cloud, SaaS, and enterprise platforms to improve overall security posture.
• Partner with enterprise application teams to ensure secure architecture, integrations, and data practices across core business platforms, including Microsoft technologies and enterprise applications.
• Lead cybersecurity incident response coordination, tabletop exercises, root cause analysis, and remediation planning.
• Evaluate emerging threats and recommend pragmatic, risk-based mitigation strategies aligned to business priorities.
• Monitor and assess cybersecurity posture across internal and third-party environments.
• Help define and mature enterprise cybersecurity capabilities, operating processes, and governance appropriate for a growing organization.
• Develop and maintain cybersecurity policies, standards, procedures, and best practices.
• Build and maintain a practical cybersecurity roadmap focused on risk reduction, resiliency, and operational effectiveness.
• Establish cybersecurity metrics, scorecards, and reporting for IT leadership and e