Cybersecurity Manager

About Evergreen Goodwill

Evergreen Goodwill of Northwest Washington is a 501(c)(3) nonprofit organization founded in 1923 that helps people get jobs across Northwest Washington by offering high-quality free job training, educationand job placement. Goodwill empowers individuals to overcome barriers to working, by providing comprehensive support and connecting them with life changing job opportunities, ensuring they are career-ready and can support themselves and their families.


The organization employs over 2,000 people, operatesfive job-training centers, 23 nonprofit retail stores and more than 27 donation sites in King, Snohomish, Skagit, Whatcomand Kitsap Counties. Every day, Evergreen Goodwill connects people with the jobs, servicesand skills they need — because Jobs Change Lives. We are committed to creating and sustaining a culture of equity, diversityand inclusion (DEI) and are focused on creating a joyful, inclusiveand successful organization.


Title: Cybersecurity Manager
Department: IT (Information Technology)
Location: Admin Bldg (Hybrid: 3 days/week in Office)
Reports to: Sr Manager, IT Services
Supervises: Cybersecurity & Compliance Engineer; Security Analysts
Salary Range: $110,000–$130,000/year
Pay Type: Salary Exempt (Paid Bi-Weekly)


About Evergreen Goodwill

Evergreen Goodwill of Northwest Washington is a 501(c)(3) nonprofit organization founded in 1923 that helps people get jobs across Northwest Washington by offering high-quality free job training, education and job placement. Goodwill empowers individuals to overcome barriers to working, by providing comprehensive support and connecting them with life changing job opportunities, ensuring they are career-ready and can support themselves and their families.
The organization employs over 2,000 people, operates five job-training centers, 23 nonprofit retail stores and more than 27 donation sites in King, Snohomish, Skagit, Whatcom and Kitsap Counties. Every day, Evergreen Goodwill connects people with the jobs, services and skills they need — because Jobs Change Lives. We are committed to creating and sustaining a culture of equity, diversity and inclusion (DEI) and are focused on creating a joyful, inclusive and successful organization.
About the Position

EGNW is looking for a hands-on, growth-minded Cybersecurity Manager to build, run, and level up our organization-wide cybersecurity and compliance program; you’ll lead strategic security initiatives, manage security tools and processes, own incident response, and keep us compliant while protecting digital assets, employee data, and operational systems from evolving threats.
This role is central to our digital transformation—embedding security into every tech project, helping the org move fast without compromising safety, collaborating across teams, and shaping policies and culture. If you’re curious, proactive, and excited to make a visible impact at a mission-driven nonprofit while learning, leading, and growing in a flexible, fast-paced environment, we want you on the team.
Essential Duties and Responsibilities include the following. Other duties, responsibilities, and activities may change or be assigned at any time with or without notice.


Cybersecurity Program Leadership
◦ Develop and implement comprehensive cybersecurity strategy aligned with EGNW's risk tolerance and operational requirements
◦ Establish and maintain cybersecurity policies, procedures, and standards across all locations and systems
◦ Lead cybersecurity risk assessments and vulnerability management programs
◦ Design and oversee incident response procedures and coordinate breach response activities
◦ Manage cybersecurity budget, vendor relationships, and technology investments
Compliance & Risk Management
◦ Ensure compliance with relevant regulations including PCI DSS (payment processing), SOX controls, and nonprofit data protection requirements
◦ Implement and maintain security frameworks (NIST Cybersecurity Framework, CIS Controls)
◦ Conduct regular security audits and assessments across retail, warehouse, and administrative environments
◦ Manage third-party security assessments and vendor risk evaluations
◦ Coordinate with legal and executive teams on regulatory compliance and reporting
Security Technology Management
◦ Oversee security technology stack including firewalls, endpoint protection, SIEM, backup systems, and monitoring tools
◦ Manage identity and access management systems, ensuring appropriate controls for 2,000+ employees
◦ Design and implement security controls for cloud environments (Azure, Microsoft 365, D365)
◦ Evaluate, select, and implement new security technologies and solutions