{"id":119547,"url":"https://alion.io/job/forbes-engineering-manager-cybersecurity","title":"Cybersecurity Manager","company":{"id":8272,"name":"Forbes","domain":"forbes.com","url":"https://alion.io/company/forbes-advisor","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":87,"open_postings":15,"ghost_share":0.133,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":68,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Jersey City, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":196000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"HIPAA","optional":false}],"status":"live","first_seen_at":"2026-07-13T15:38:35Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-11-03T19:51:32Z","board_verified":true,"closed_at":null,"days_open":113,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":112},"description":"Forbes is an iconic global media brand that has symbolized success for over a century. Fueled by journalism that informs and inspires, Forbes spotlights the doers and doings shaping industries, achieving success and making an impact on the world. Forbes connects and convenes the most influential communities ranging from billionaires, business leaders and rising entrepreneurs to creators and innovators. The Forbes brand reaches more than 140 million people monthly worldwide through its trusted journalism, signature ForbesLive events and 49 licensed local editions in 81 countries.\nForbes is seeking an Engineering Manager, Cybersecurity responsible for protecting Forbes' corporate technology environment and consumer-facing digital platforms through the design, implementation, and continuous improvement of cybersecurity controls, processes, and governance. This is a hands-on technical leadership role reporting to the Vice President, Corporate Technology, with formal people-management responsibility for a small distributed team of onshore employees and offshore contractors.\nThis individual will own cybersecurity across two complementary domains: corporate technology security, spanning identity and access management, endpoint protection, network and cloud security, email and phishing defense, and compliance; and web platform security, spanning cloud infrastructure, source code and pipeline security, vulnerability management, and client-side protection for Forbes' digital properties. The role also serves as the governance lead for all cybersecurity matters across the organization, partnering closely with Infrastructure, Engineering, QA, Product, Legal, and Corporate Technology teams. The ideal candidate is both a technical security expert and a business-minded collaborator, capable of balancing security requirements with operational efficiency and business objectives.\nThis is a hybrid position based at Forbes' Jersey City headquarters, with an expectation of working in the office 2-3 days per week. Candidates should reside in New Jersey, New York, or the greater New York City metropolitan area.\nResponsibilities:\nLeadership and Governance\nLead, mentor, and manage a distributed team of onshore employees and offshore contractors supporting corporate technology and web platform security.\nManage direct reports, goal setting, performance reviews, professional development, and day-to-day prioritization of work.\nOversee offshore contractor engagements, including deliverables, work quality, and coordination with vendor and resource management.\nServe as the governance lead for all cybersecurity matters across the organization, setting direction, standards, and priorities.\nDevelop and maintain company-wide cybersecurity policies, standards, procedures, and technical documentation.\nPartner with Legal on vendor security preparation and review, including NDAs, data processing agreements (DPAs), and vendor risk assessments.\nManage cybersecurity projects, operational requests, and remediation initiatives, ensuring timely execution and resolution.\nSupport PCI and other compliance initiatives, audits, and security assessments, including evidence collection and questionnaire responses.\nMaintain security metrics, reporting, and operational dashboards to provide visibility into organizational risk.\nMonitor emerging cybersecurity threats and vulnerabilities, recommending improvements to strengthen Forbes' security posture.\nServe as the organization's designated HIPAA Security Officer, ensuring compliance with the HIPAA Security Rule and overseeing the protection of electronic protected health information (ePHI).\nCorporate Technology Security\nAdminister and secure the enterprise identity and access management (SSO/MFA) platform, including authentication policies, identity lifecycle automation, and privileged access controls.\nManage endpoint detection and response (EDR) and endpoint protection across the enterprise device fleet.\nManage enterprise network security, including next-generation firewalls, switching infrastructure, and cloud network environments.\nSecure the enterprise cloud identity and directory environment, including conditional access, session controls, and account hygiene.\nManage email security and phishing defense, including phishing investigation and triage, security awareness training, and phishing simulation programs.\nLead security incident investigations and response efforts, coordinating remediation and root-cause analysis activities.\nWeb and Digital Platform Security\nManage cloud network architecture and security controls for Forbes' consumer-facing digital platforms.\nOversee source code and development platform security, including repository access controls, secrets management, and CI/CD pipeline security.\nOwn the vulnerability scanning and vulnerability management program across web properties and infrastructure, driving remediation with Engineering.\nLead client-side security for web properties, including governance of third-party scripts and tags and browser-side protections.\nPartner with Engineering, QA, and Product teams to embed security requirements and best practices throughout the software development lifecycle.\nThe ideal candidate:\nBachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related technical field.\nCISSP, CCSP, CISM, Security+ and/or GIAC certifications preferred.\n7+ years of cybersecurity experience, including cloud security, infrastructure security, network security, or security engineering.\nExperience leading and developing security engineers, including distributed and offshore team members or contractors.\nExperience with the HIPAA Security Rule and protecting electronic protected health information (ePHI) is preferred\nExperience managing enterprise productivity suites, identity and access management platforms, public cloud platforms, and endpoint protection and threat detection solutions.\nHands-on experience with enterprise firewalls, network infrastructure, and cloud networking across multiple cloud providers.\nPractical experience applying AI tools to security and engineering workflows, such as automation, detection, triage, and reporting, and familiarity with governing safe AI adoption across an enterprise.\nStrong scripting and automation skills for security workflow and identity lifecycle automation.\nExperience supporting PCI audits, compliance assessments, and security reviews.\nDeep understanding of identity management, privileged access controls, authentication, and authorization principles.\nSkilled in leading investigations, incident response, vulnerability management, and threat analysis.\nExperience developing and maintaining security policies, standards, and governance processes.\nExperience partnering with legal and procurement teams on vendor security reviews and contract preparation.\nProven ability to balance strategic security initiatives with hands-on technical execution.\nExceptional communication skills with the ability to explain complex security concepts to both technical and non-technical stakeholders.\nThe annual base salary range for this role is $165,000 - $175,000.\nForbes has estimated the compensation range set forth above in good faith. The compensation range is what we believe we will offer, and ultimately pay, a successful candidate. In determining this range, we consider the experience, level of education (if applicable to the role), knowledge, skills, and abilities required to be had by a successful candidate as well as the budget and the company’s pay rates, generally. This said, we may have to make changes to our compensation estimates and job descriptions from time to time and we expressly reserve the right to do so. Should we make any such changes, this advertisement will be revised to reflect such revisions. We encourage you to occasionally re-visit this advertisement to ensure that you are abreast of any changes. \nThis role may evolve over time. While this job description outlines the primary responsibilities, additional duties may be assigned as business needs change. Forbes aims to offer employees the flexibility they need in order to be successful. Some positions may require candidates to be based in a specific location for consideration while some roles may be fully remote (within the U.S.) if it aligns with the needs of the position. This position is only open to candidates residing in California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Maine, Maryland, Massachusetts, New Jersey, New York, North Carolina, Pennsylvania, South Carolina, Tennessee, Texas, & Washington. Due to business operations and compliance requirements, we are unable to consider applicants based outside these states at this time.\nForbes is an equal opportunity employer.\nStaff and Applicant Privacy Notice\nNotice of E-Verify Participation","description_format":"text","description_chars":8872,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Digital Media","Financial News & Media"],"lifecycle":[{"event":"open","at":"2026-07-13T15:38:35Z"}],"visa":[],"liveness":{"score":27,"band":"fade","label":"Fading","p_open":1,"p_active":0.758,"p_room":0.36,"age_days":112,"expected_fill_days":68,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/forbes-engineering-manager-cybersecurity","json_url":"https://alion.io/job/forbes-engineering-manager-cybersecurity.json","meta":{"generated_at":"2026-11-03T21:26:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":594,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8272},"rest":"https://alion.io/mcp/rest/get_company?id=8272"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fforbes-engineering-manager-cybersecurity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fforbes-engineering-manager-cybersecurity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fforbes-engineering-manager-cybersecurity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/forbes-engineering-manager-cybersecurity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fforbes-engineering-manager-cybersecurity"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":119547}},{"tool":"search_jobs","arguments":{"company":"forbes.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":119547},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}