Manager, Cyber Security

About HCC/CCI

Henry Crown & Company/CC Industries is a Chicago-based, privately-held company that manages business, philanthropic, and family interests on behalf of a multi-generational family. The business ventures fall into broadly-defined categories: wholly-owned operating companies, public and private equity investments, and real estate. The enterprise also supports individual and collective giving through Crown Family Philanthropies and provides traditional family office services across generations. The enterprise employs approximately 350 professionals in the areas of investment management, corporate development, financial operations, tax, research and innovation, human resources, information technologies, and legal.

Why Work for Us? 

We are a private enterprise with more than a 100-year legacy and track record of financial success, supporting our communities, and taking care of our employees. We plan strategically with a long-term time horizon and an integrated approach to access superior opportunities and optimize financial results. Integrity, collaboration, and dedication are cornerstones of our workplace culture that create rewarding professional experiences.

Position Description

The Manager of Cyber Security plays a pivotal role in our organization, providing leadership and operational and tactical direction to a diverse team. Under the guidance of the Director, the Cyber Security Manager sets the strategic direction for the information security program, establishing highly effective corporate policies and fostering collaboration among enterprise teams. This leader is also responsible for the education and enforcement of these policies and matters of compliance. With a solid technical background and a deep understanding of risk, mitigation, and controls, the manager is expected to lead teams that perform technical work and must possess leadership qualities.

This position requires strong written and oral communication skills and the ability to communicate detailed, technical information comprehensibly by individuals at varying degrees of experience and skill levels. The role requires speaking confidently in front of large groups and with corporate management, vendors, and service providers. The information security manager also contributes to the company's IT security strategy and roadmap.

Responsibilities

• Advanced Technical Expertise:
  • Expertise in cloud security (AWS, Azure, GCP) and zero-trust architecture.
  • Strong understanding of AI/ML-driven threat detection and automation for cybersecurity.
  • Deep knowledge of advanced incident response and forensic investigation techniques.
  • Proficiency in compliance frameworks and regulatory standards (NIST, CIS, ISO, GDPR, CCPA).
• Leadership & Strategy:
  • Proven ability to lead, mentor, and develop a high-performing cybersecurity team.
  • Strategic thinking with the ability to align cybersecurity initiatives with business objectives.
  • Strong decision-making skills in complex, high-pressure environments.
• Soft Skills:
  • Excellent communication and presentation skills, with the ability to articulate complex security concepts to technical and non-technical stakeholders.
  • Strong organizational skills with the ability to prioritize and manage multiple projects simultaneously.
  • High level of integrity, trustworthiness, and professionalism.

Qualifications

• Education:  Bachelor’s degree in Computer Science, Information Assurance, MIS or related field, or equivalent combination of education and experience.
• Certifications/Licenses: CISSP, Certified Information Systems Auditor (CISA), or Project Management Professional (PMP) preferred.
• Years of Experience: 10+ years of technical hands-on IT experience, with at least 3-5 years in a team lead or supervisor role.
• Lead Security Initiatives:
  • Manage the implementation of advanced security solutions, including cloud security, endpoint protection, and network defense, ensuring robust protection against sophisticated cyber threats.
  • Oversee the development of a zero-trust architecture and integrate AI/ML-driven threat detection and response capabilities to enhance the organization’s security posture.
  • Ensure compliance with regulatory frameworks (e.g., NIST, GDPR, ISO) and collaborate with internal teams to maintain alignment with business goals and legal requirements.
• Incident Response & Forensics:
  • Lead incident response teams in investigating and resolving security breaches, conducting root-cause analysis, and implementing lessons learned to pr