Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 34 days ago

Cybersecurity Manager

SBC9 open roles

Pay
$135,696 – $180,902 a year
Where
San Francisco, CA, United States, Los Angeles, CA, United States
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCybersecurity ManagerSBC · San Francisco, CA, United States, Los Angeles, CA, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SBC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. SBC postings stay open a median of 31 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted 34 days ago

SBC median: 31 days open

The posting

Job Description

Office of Information Technology

Annual Salary Range IT Manager II: $135,696 to $180,902

FLSA Exempt

About the Office

The Office of Information Technology (IT) is responsible for enabling State Bar’s internal and external stakeholders by the management, implementation, and maintenance of an organization's technology to support of State Bar’s mission and goals. The office’s primary goals are to build and maintain functional capabilities, to support innovation and to ensure that all systems are running smoothly, efficiently, and securely to support the needs of the organization and its stakeholders.

About the Division

The IT Operations & Security division within the Office of Information Technology manages the State Bar’s core technology environment, including infrastructure, end-user support, and cybersecurity. The division ensures that systems remain secure, reliable, and accessible so staff can work effectively and the public can access essential State Bar services. These functions form the technological backbone of mission-critical operations across the organization.

The Ideal Candidate

The ideal candidate is a strategic and technical leader responsible for managing an organization's cybersecurity efforts. They excel in implementing and maintaining robust security measures to protect IT infrastructure, systems, and data. With strong collaboration skills, they work with internal teams and external partners to integrate security across operations, enhance cybersecurity visibility through dashboards, and automate security monitoring and incident response workflows.

They also bring hands-on experience with core infrastructure operations and are comfortable leading both security and operational teams.

Job Summary

The Cybersecurity & Infrastructure Manager serves as the State Bar's lead cybersecurity manager, providing strategic leadership and hands-on technical expertise to protect the State Bar's hybrid technology environment, including its data centers in Los Angeles and San Francisco. This position leads the cybersecurity program, including security monitoring, incident response, vulnerability management, and security policy, and oversees assigned infrastructure services that support a secure and resilient technology environment.

The manager leads a team of technical specialists, manages security and infrastructure vendors, and partners closely with the Infrastructure and Cloud, Applications, and end-user support teams to integrate security across operations. This role reports on cybersecurity risk and operational status to senior leadership.

Examples of Essential Duties

Duties may include, but are not limited to the following.

  • Execute the organization's risk-based cybersecurity strategy to protect systems, data, and operations.
  • Establish, enforce, and continuously improve security policies, standards, and procedures aligned with organizational goals.
  • Serve as the hands-on technical lead for security incident response, directing triage[LJ1.1][VL1.2], investigation, containment, and recovery, including log, endpoint, and network analysis and digital forensics, and coordinate vendors and partners during an event.
  • Develop, test, and maintain the incident response plan, and run tabletop and recovery exercises that prepare technical teams and leadership to respond.
  • Collaborate with internal teams and external partners to integrate security across all aspects of operations.
  • Enhance cybersecurity visibility by developing dashboards that provide actionable insights for executives and IT teams.
  • Oversee the design and implementation of secure IT architectures in collaboration with technical teams.
  • Automate security monitoring and incident response workflows using SOAR frameworks.
  • Oversee security monitoring and analytics capabilities through SIEM and threat-hunting tools.
  • Conduct risk and vulnerability assessments; implement remediation strategies.
  • Ensure compliance with applicable regulatory and industry security and privacy standards relevant to the State Bar.
  • Oversee encryption solutions and ensure timely application of security patches and updates in coordination with infrastructure teams.
  • Develop, test, and maintain an incident response plan; investigate and remediate security incidents.
  • Conduct engaging security awareness training to promote a security-first culture.
  • Research, evaluate, and implement advanced security tools and emerging technologies to enhance the organization's security posture and resilience.
  • Maintain detailed documentation of security policies, procedures, and incidents.
  • Execute cloud security strategy to support the State Bar’s Hybrid & Multi-Cloud solutions across various providers.
  • Provide actionable reports to senior management on cybersecurity risks, status, and improvement initiatives.
  • Oversee assigned infrastructure services, ensuring they are secure, reliable, and well maintained.
  • Supervise, coach, and develop technical staff, ensuring they have the tools, training, and direction needed for continuous growth.

Employment Standards

Knowledge of:

  • Cybersecurity tools and technologies, including Next-Generation Firewalls (NGFWs), Extended Detection and Response (XDR), Endpoint Detection and Response (EDR), Web Application Firewall (WAF), and Security Information and Event Management (SIEM) systems.
  • Secure system and network design principles, including Zero Trust Architecture (ZTA) and Defense in Depth.
  • Cloud security frameworks and tools (e.g., Microsoft Defender for Cloud, Microsoft Sentinel, and CIS Cloud Controls).
  • Encryption technologies and secure data handling practices, including data at rest, in transit, and during processing.
  • Systems hardening principles and practices.
  • Compliance frameworks and regulatory security and privacy standards (e.g., FedRAMP, NIST, ISO 27001, GDPR, HIPAA, PCI DSS).
  • Emerging cybersecurity threats, trends, and innovations, including AI/ML implications in security and supply chain risk management.
  • Incident response frameworks.
  • Methods for conducting risk assessments, vulnerability assessments, penetration testing and threat intelligence.
  • Security training and awareness best practices to foster a security-conscious culture.
  • Effective documentation and reporting methods for policies, procedures, and incident records.
  • Principles of supervision, staff development, and performance management.

Ability to:

  • Oversee the implementation and management of security technologies.
  • Oversee assigned infrastructure operations to ensure secure, reliable, and available services.
  • Design and implement secure networks and systems, incorporating ZTA and Defense in Depth principles.
  • Interpret and apply compliance frameworks and regulatory standards.
  • Analyze and resolve security incidents proactively using problem-solving skills.
  • Communicate complex security concepts to technical and non-technical audiences.
  • Mentor and develop high-performing cybersecurity teams.
  • Collaborate across organizational levels and external stakeholders to develop security solutions.
  • Adapt to changing priorities while maintaining alignment with organizational goals.
  • Present strategies and recommendations clearly and persuasively.
  • Maintain confidentiality and professionalism in handling sensitive information.

Minimum Qualifications

Education

  • Bachelor’s degree in computer science, Cybersecurity, or a related field (or equivalent experience).

Experience

  • Minimum of five (5) years of experience in IT security, including three (3) years of supervisory or team-lead experience. Experience with IT infrastructure operations is highly desirable.

License, Certificate, Registration Requirements

  • Professional certifications such as CISSP or equivalent are a plus but not required.

Applicants who meet the Minimum Qualifications will be required to successfully complete the State Bar’s selection process for this classification.

About the State Bar

The State Bar of California’s mission is to protect the public and includes the primary functions of licensing, regulation, and discipline of attorneys; the advancement of the ethical and competent practice of law; and support of efforts for greater access to, and inclusion in, the legal system.

Our Values

Clarity | Investing in Our People | Excellence | Respect | Growth Mindset

Learn more about our values.

DEI Statement

We are a diverse, equitable, and inclusive workplace where all of our employees and prospective employees experience fairness, dignity, and respect.

Learn more about our commitment to DEI.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SBC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SBC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SBC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.