Manager, Cyber Risk Advisor - Managed Risk
$110,000–$183,000 year
On-siteOxford, Nova Scotia, Canada
Job Summary
Lead and mentor a team of Cyber Risk Advisors, overseeing workload distribution, conducting regular 1:1s, and managing performance reviews to foster a high-performance culture. Act as the primary escalation point for complex technical issues, interpreting vulnerability and attack surface data to provide prioritized, context-driven remediation guidance that drives measurable risk reduction. Serve as the senior-level strategic Exposure Management point of contact for a customer portfolio, simplifying vulnerabilities, contextualizing cyber risk trends, and guiding customers toward effective mitigation decisions. Validate team outputs to ensure consistency and accuracy while identifying expansion opportunities and service improvement areas. This role reports to the Director of Operations within Sophos, a global cybersecurity leader defending 600,000 organizations. The position combines deep technical expertise in exposure management with hands-on people leadership to deliver an exceptional managed service experience.
Required Qualifications
- 5+ years of experience in cybersecurity
- at least 1–2 years in a team lead, senior advisor, or people management role
- Demonstrated ability to lead, coach, and develop technical teams in a managed service environment
- Deep knowledge of vulnerability management
- Deep knowledge of attack surface management (reduction)
- Deep knowledge of common security frameworks (NIST, CIS, ISO, MITRE ATT&CK)
- Strong knowledge of enterprise networking concepts (routing, switching, VLANs, firewalls, VPNs, and remote access technologies)
- Hands-on experience with EASM/IASM tools
- Hands-on experience with vulnerability scanning platforms (e.g., Tenable, Qualys)
- Hands-on experience with remediation workflows
- Exceptional communication and advisory skills
- Proven ability to manage multiple customer relationships simultaneously
- Experience owning or contributing to service delivery processes
- Experience owning or contributing to operational metrics
- A collaborative leadership style
- A proactive, problem-solving mindset
- A genuine drive to help both customers and colleagues succeed
- Must have legal authorization to work in the jurisdiction where the position is posted
- Must be able to lift 50 lbs
Desired Qualifications
- Industry certifications such as CISSP, CISM, OSCP, CEH, or Security+
- networking credentials such as CompTIA Network+ or equivalent
- Hands-on experience with Tenable Nessus and/or the Tenable One platform
- Background in Incident Response, Threat Intelligence, or Red/Blue Team operations
- Knowledge of cloud security (AWS, Azure, GCP)
- Prior experience in a managed security service provider (MSSP) or consultancy
- Prior experience in exposure to customer success or account management functions
- Experience presenting to and influencing C-suite and board-level stakeholders
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.