{"id":2571529,"url":"https://alion.io/job/reworld-senior-manager-it-security-and-risk-management","title":"Senior Manager, IT Security and Risk Management","company":{"id":2120139,"name":"Reworld","domain":"reworldwaste.com","url":"https://alion.io/company/reworldwaste","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":19,"ghost_share":0,"stale_share":0.684,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Florham Park, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":136600,"max":195300,"currency":"USD","period":"year","gross":null,"usd_annual":195300},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-14T23:03:45Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-11-05T08:36:25Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"Who we are\nFor more than 40 years, Reworld has been a leader in sustainable waste solutions, providing our customers with innovative solutions that help them achieve carbon-negative outcomes.\nOur Vision\nReworld is leading the charge to a carbon-negative future through revolutionary sustainable materials management solutions that reduce, reuse, recycle and reimagine waste for the benefit of society and the environment.\nOur Business\nReworld partners with businesses by offering cutting-edge engineering and innovative solutions, to help customers reduce, reuse, recycle and recover value from waste streams and meet or exceed their sustainability goals.\nOur Value\nReworld's differentiator comes from our ecosystem of technology, facilities and partnerships, trusted by the world’s largest organizations to reimagine waste management for a smarter, more sustainable world.\nAll that we’re missing is you. Apply today!\nAbout the role\nThe Senior Manager, IT Security and Risk Management is a hands-on technical leader responsible for advancing Reworld’s NIST-aligned security roadmap across enterprise, cloud, and operational technology environments. The role leads vulnerability and exposure management, threat detection, incident response, network and cloud security, OT resilience, and secure adoption of application and AI technologies. Working across Security, IT, OT, Legal, GRC, and business teams, this position strengthens technical controls, supports compliance requirements, and translates cyber risk into clear business decisions.\nKey Responsibilities\nVulnerability and Exposure Management\nLead and continuously improve the risk-based vulnerability and exposure management program, including scanning coverage, asset attribution, prioritization, remediation timelines, exceptions, and validation of closure.\nPrioritize risk using exploitability, external exposure, attack paths, asset criticality, business impact, and compensating controls; partner with technology and OT owners to drive remediation and escalate overdue risk.\nCoordinate penetration tests and external attack-surface reviews, verify corrective actions, and report coverage, aging, remediation performance, trends, and residual risk to technical and executive audiences.\nThreat Detection, Security Monitoring and Incident Response\nDevelop and tune detections across endpoint, identity, network, cloud, application, email, and OT telemetry using threat intelligence and attacker behaviors.\nLead incident triage, technical investigation, containment, recovery, evidence preservation, root-cause analysis, and post-incident review in coordination with internal teams and external partners.\nMaintain and test incident-response playbooks for ransomware, identity compromise, data loss, third-party, cloud, and OT scenarios; use automation and AI-assisted analysis to improve alert quality and investigation speed with appropriate human validation.\nNetwork, Cloud and Platform Security\nDesign and improve network security across enterprise and industrial environments, including firewalls, segmentation, secure remote access, network access control, internet egress, third-party connectivity, and resilient architecture.\nAssess and strengthen security across Azure, AWS, SaaS, servers, containers, infrastructure as code, and enterprise platforms, including encryption, secrets management, logging, monitoring, workload protection, and secure administrative access.\nEmbed secure architecture reviews, configuration baselines, validation, dependency scanning, and security testing into CI/CD and change processes; support M&A discovery and remediation of inherited assets, identities, exposures, and control gaps.\nOperational Technology and Resilience\nExtend security visibility, monitoring, access control, vulnerability management, and incident response into OT and industrial control environments while respecting safety and availability requirements.\nAssess IT/OT convergence, remote and vendor access, segmentation, industrial protocols, and compensating controls; help validate backup integrity, restoration procedures, recovery dependencies, and corrective actions from resilience testing.\nAI, Data and Application Security\nAssess security risks in enterprise applications and AI solutions, including models, agents, prompts, data sources, plugins, connectors, APIs, and third-party services, and recommend proportionate controls.\nPartner with Data Protection, Privacy, Legal, and business teams to implement AI governance guardrails, reduce data leakage risk, and strengthen preventive controls for sensitive information.\nQualifications\n7+ years of progressive cybersecurity or infrastructure security experience, including hands-on work in incident response, detection engineering, vulnerability management, network security, or cloud security.\nDemonstrated success operating or materially improving a risk-based vulnerability or exposure management program in a complex enterprise environment.\nStrong investigation skills across endpoint, identity, network, cloud, email, and application data, with experience preserving evidence and documenting defensible conclusions.\nEngineering experience with SIEM, EDR/XDR, vulnerability and attack-surface management, enterprise firewalls, secure remote access, cloud-native controls, and security automation.\nExperience securing hybrid environments that include Microsoft 365, Azure or AWS, SaaS applications, Windows and Linux systems, enterprise networks, and cloud services.\nFamiliarity with OT/ICS security and working knowledge of application, API, container, infrastructure-as-code, CI/CD, data protection, and AI/LLM security risks.\nScripting or automation capability using Python, PowerShell, Bash, APIs, SOAR, or configuration-management tools, plus strong communication skills and the ability to explain technical risk in clear business terms.\nPreferred Qualifications\nBachelor’s degree in cybersecurity, computer science, engineering, information systems, or equivalent practical experience.\nRelevant certification such as CISSP, GCIH, GCIA, GSEC, GICSP, CCSP, cloud or network security, or an equivalent credential.\nExperience in industrial, energy, waste, manufacturing, utility, or another high-availability operational environment, including support for NERC CIP, SOX, privacy, or comparable control frameworks.\nExperience conducting security reviews for acquisitions, SaaS platforms, cloud migrations, or AI-enabled solutions.\nIn addition to salary, this role is eligible for benefits. The benefits would include medical, prescription drug, vision, and dental plans; 401(k) plan; paid parental leave; paid time off; and paid holidays.\nAdditional details are available at https://www.reworldwaste.com/careers/benefits.\nFor additional information, refer to the Pay Transparency section below.\nAll Reworld positions require a candidate's ability to perform the duties and responsibilities of the role while upholding Reworld's Values, including (but not limited to) contributing to a safe and inclusive workplace, delivering results through trust, and building breakthrough capabilities.\nPlease note that Level, Title and/or Salary may be adjusted based on the applicant's experience or skills.\nPay Transparency\nReworld is committed to paying its staff equitably, and we strive to provide competitive compensation and benefits packages. The range below reflects Reworld’s reasonable estimate of base pay for this role based on primary posting location. It is expected that most qualified candidates in this location will fall within the posting range. The final salary offered for this role will be determined based on factors including, but not limited to: experience, education, geographic location, skills and competencies, travel requirements and/or union contracts (if applicable). Pay ranges are reviewed from time to time and may be modified in the future.\nThe pay range for the primary location of this position is: $136,600.00 - $195,300.00 USD per annumReworld™ provides an industry-leading benefits package that supports the whole person-and their families-through a balanced approach to mental, physical, and financial wellbeing. Regular full-time employees based in the USA have access to comprehensive medical, prescription drugs, dental, and vision coverage, FSA, HSA, short- and long-term disability benefits. Our 401(k) plan is industry-leading, with an up to 7% company match. Additional benefits include Company-paid life and AD&D insurance, EAP, paid parental leave, and educational assistance. For more information regarding these offerings, please visit the Reworld Careers Benefits Page. Reworld™ reserves the right to amend, suspend or terminate any benefit plan, in whole or in part, at any time.\nOur DEI Commitment\nReworld is an Equal Opportunity Employer, has developed an Affirmative Action Program (AAP), and will not discriminate against any qualified applicants because of race, color, religion, sex, national origin, sexual orientation, gender identity, disability (including perceived disability, physical, mental, and/or intellectual disabilities), veteran status, liability for service in the Armed Forces of the United States, or any other characteristic protected by law.\nKnow Your Rights (Click to view poster)\nIf you are an individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site because of your disability. You can request reasonable accommodations by going to Reworldwaste.com and clicking on the ‘Contact Us’ button. Under Inquires, select ‘Careers’ in the Interest field, fill out all required fields including your message. In the message section, please note this is a ‘Job Application Accommodation Request’.\nAttention Staffing Agencies & Search Firms\nReworld may sometimes selectively collaborate with staffing agencies and search firms (Agencies). Reworld will only consider candidates from Agencies with whom a signed agreement and a duly authorized work order (for a specific role) has been duly executed. Any unsolicited candidate submissions or candidate submissions from Agencies that do not meet these criteria, will be deemed invalid and ineligible for any fees.","description_format":"text","description_chars":10290,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Waste Management","Alternative Fuels"],"lifecycle":[{"event":"open","at":"2026-10-14T23:03:45Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.583,"p_room":0.9,"age_days":21,"expected_fill_days":35,"reasons":["conf:3","stale_co","win:mid","comp:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":195300,"is_top_pay":true},"html_url":"https://alion.io/job/reworld-senior-manager-it-security-and-risk-management","json_url":"https://alion.io/job/reworld-senior-manager-it-security-and-risk-management.json","meta":{"generated_at":"2026-11-05T10:25:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13333,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2120139},"rest":"https://alion.io/mcp/rest/get_company?id=2120139"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Freworld-senior-manager-it-security-and-risk-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Freworld-senior-manager-it-security-and-risk-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Freworld-senior-manager-it-security-and-risk-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/reworld-senior-manager-it-security-and-risk-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Freworld-senior-manager-it-security-and-risk-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2571529}},{"tool":"search_jobs","arguments":{"company":"reworldwaste.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2571529},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}