Senior Manager, Cybersecurity

About the role

We are seeking an experienced and strategic Cybersecurity Sr. Manager to lead our security operations across both enterprise IT and Operational Technology (OT/ICS) environments. This high‑impact leadership role is responsible for protecting critical systems, enabling resilient operations, and advancing our cybersecurity maturity in alignment with business goals and industry best practices.

Key responsibilities

• Lead security operations, vulnerability management, data privacy, and threat response across IT and OT environments.
• Establish and direct Oceaneering's Data Privacy and Governance function, defining policies, frameworks, and architecture standards.
• Own the enterprise Threat & Vulnerability Management (TVM) program, governing patch management and risk‑based remediation.
• Lead incident response and proactive threat‑hunting capabilities, maintaining tested playbooks and crisis processes.
• Manage the lifecycle, performance, and optimization of security tools, aligning them with the NIST Cybersecurity Framework.
• Oversee enterprise‑wide security awareness and phishing‑simulation programs to reduce human risk.
• Partner with IT, OT, and business leaders to integrate security into operations and communicate risk to senior leadership.

Required profile

• Minimum 15 years of cybersecurity experience, including leadership in security operations.
• At least 10 years of SOC operations, incident response, and vulnerability management experience.
• Experience overseeing third‑party security providers (MDR/SOC).
• US citizen or Permanent Resident due to ITAR requirements.
• Proven ability to align security strategy, tooling, and operations with business outcomes.
• Deep knowledge of frameworks such as NIST CSF and ISO 27001.
• Strong leadership, communication, and stakeholder‑engagement skills.
• Relevant certifications (e.g., CISSP, CISM) preferred.
• Experience in energy, oil & gas, or critical‑infrastructure environments and familiarity with OT/ICS security standards (NIST 800‑82, IEC 62443) is a plus.

Required skills

• SIEM, SOAR, EDR, MDR, and cloud‑security technologies.
• Vulnerability and patch‑management processes.
• Incident response and threat‑hunting capabilities.
• Data‑privacy governance and related frameworks.
• Knowledge of NIST CSF, ISO 27001, IEC 62443, and NIST 800‑82.