Cyber Security Manager

Acumatica is a company on a mission. We are a leading innovator in cloud ERP (Enterprise Resource Planning) solutions with growing businesses worldwide. But don’t take our word for it—read what analysts like G2, IDC, Nucleus Research, and Info-Tech have to say about us. Acumatica is different by design and purposely built to help small and midsized companies thrive in today’s digital economy. Our industry-specific business management solution is engineered to address real-world needs—featuring intelligent workflows and market-leading usability that enable companies to manage risk, anticipate disruption, and seize new opportunities. Our principled business practices, growth-friendly licensing, and flexible deployment options put organizations in control of their own future. Acumatica is more than just a product—we are a community of partners, customers, and creators committed to elevating business performance. Our ecosystem is driven by collaboration, merging leading technology and real-world insights to put organizations control of their future. In May of 2025, Acumatica was acquired by Vista Equity Partners, a global investment firm focused on enterprise software, data and technology-enabled businesses. Acumatica’s culture is collaborative and high-energy. We are passionate about our product and our mission, and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world. Acumatica offers exceptional professional and financial growth potential. To learn more about Acumatica’s mission, please visit:  http://www.acumatica.com. The Cyber Security Manager drives the organization’s cybersecurity program through cross-functional leadership and targeted technical contributions. This role focuses on leading initiatives by directing resources across departments (IT, product, operations, compliance) while partnering closely with the existing dedicated SOC. The position requires a balance of strategic responsibilities, including partnership, influence, and program leadership, with technical oversight and hands-on contributions. It also includes AI risk management and governance to support secure adoption of AI/ML and generative AI technologies. Key Responsibilities: Leadership, Strategy & Cross-Functional Initiatives •       Lead and drive key cybersecurity initiatives and projects by directing and coordinating resources from IT, product/development, operations, compliance, and other teams to ensure security processes, controls, measures, deliverables, and tasks are completed effectively and on time. •       Develop and execute the organization’s cybersecurity strategy, roadmap, policies, and program priorities aligned with business goals and evolving threats. •       Lead AI security governance, risk management, and secure adoption practices for the organization’s AI/ML and generative AI initiatives, ensuring alignment with frameworks such as NIST AI RMF, OWASP LLM Top 10, and MITRE ATLAS. •       Schedule and coordinate penetration testing for product releases, ensuring alignment with annual testing schedules and audit requirements. •       Actively participate in and support annual audit processes, including SOC 1 and SOC 2 reviews as well as vendor security audits (facilitating evidence, findings review, remediation, and improvements). •       Manage relevant security budgets, vendor relationships, tool selection, and third-party risk activities for assigned programs, including AI/ML vendor and third-party AI risk assessments. •       Champion security awareness and cross-departmental collaboration, translating risks into business terms for leadership. •       Coordinate effectively with the dedicated Security Operations Center on operational matters to maintain strong alignment. Technical Oversight & Contributions: •       Provide senior-level guidance on vulnerability management, penetration testing outcomes, risk assessments, and remediation efforts. •       Direct and participate in security engineering and process improvement initiatives (AI automation, architecture security reviews, and control enhancements for releases). •       Coordinate adversarial testing and red teaming of AI systems and pipelines, with focus on prompt injection, model poisoning, data poisoning, and other AI-specific threats. •       Lead or sponsor testing programs and continuous security enhancement projects. •       Contribute practical expertise to high-priority deliverables as needed. Experience: 8–12+ years of progressive, hands-on cybersecurity experience with a proven track record leading cross-functional initiatives and delivering results through other teams. At least 4–6 years successfully coordinating, supporting audits (SOC 1/2, vendor), risk assessments and driving security outcomes in collaborative environments. Education: Bachelor’s degree in a relevant field is nice to have. Equivalent professional experience is required. Certifications: Hands-on, practical certifications (e.g., OSCP or equivalent) are highly valued. Familiarity with AI security concepts or related training (e.g., OWASP LLM, MITRE ATLAS) is a plus. Skills: Strong background in vulnerability management, security project coordination, compliance/audit processes (SOC 1/2, vendor), risk management, cloud security, and product security. Excellent ability to influence and direct cross-functional teams to achieve outcomes while collaborating with an existing Security Operations Center. Awareness of AI/ML security concepts, adversarial machine learning risks, prompt injection, model poisoning, and relevant frameworks (OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF). Acumatica is an Affirmative Action and Equal Opportunity Employer/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity,