Manager of Cyber Risk Advisor, Sophos

• 5+ years of experience in cybersecurity, with at least 1–2 years in a team lead, senior advisor, or people management role
• Demonstrated ability to lead, coach, and develop technical teams in a managed service environment
• Deep knowledge of vulnerability management, attack surface management (reduction), and common security frameworks (NIST, CIS, ISO, MITRE ATT&CK)
• Strong knowledge of enterprise networking concepts (routing, switching, VLANs, firewalls, VPNs, and remote access technologies)
• Hands-on experience with EASM/IASM tools, vulnerability scanning platforms (e.g., Tenable, Qualys), and remediation workflows
• Exceptional communication and advisory skills — fluent in both executive-level narratives and deep-dive technical discussions
• Proven ability to manage multiple customer relationships simultaneously, balancing strategic advisory with timely escalation of critical risks
• Experience owning or contributing to service delivery processes and operational metrics
• A collaborative leadership style with a proactive, problem-solving mindset and a genuine drive to help both customers and colleagues succeed
• At Sophos, we believe in the power of diverse perspectives to fuel innovation. Research shows that candidates sometimes hesitate to apply if they don't check every box in a job description. We challenge that notion. Your unique experiences and skills might be exactly what we need to enhance our team. Don't let a checklist hold you back – we encourage you to apply

Desirable

• The Manager, Cyber Risk Advisor is a senior-level individual who combines deep technical expertise in exposure management with hands-on people leadership
• Reporting to the Director of Operations, this role is responsible for delivering an exceptional managed service experience to a portfolio of customers while also mentoring and day-to-day managing a team of Cyber Risk Advisors
• On the technical side, you will lead complex advisory engagements, interpret vulnerability and attack surface data, and provide prioritized, context-driven remediation guidance that drives measurable risk reduction
• On the people side, you will coach team members, oversee workload distribution, conduct regular 1:1s, contribute to hiring, evaluate performance and act as an escalation point for both customers and colleagues
• Strong communication skills are essential — you will be equally comfortable presenting to a CISO and diving into raw scan data with an IT team
• Lead, mentor, and manage a team of Cyber Risk Advisors, fostering a high-performance culture grounded in continuous learning and accountability
• Conduct regular 1:1s, provide ongoing coaching and constructive feedback, and contribute to formal performance reviewsOversee day-to-day workload distribution across the team, ensuring coverage, quality, and adherence to existing service delivery processes
• Act as the primary escalation point for complex technical issues and customer concerns raised by team membersPartner with the Director of Operations on team hiring, onboarding, and skills development planning
• Identify skill gaps within the team and drive targeted development initiatives and knowledge-sharing sessions
• Track and report on service-level and individual performance KPI metrics on a regular cadence, providing clear visibility to the Director of Operations and relevant stakeholders on team output, customer outcomes, and areas for improvement
• Serve as a senior-level, trusted Cyber Risk Advisor for a portfolio of customers, simplifying complex vulnerabilities, explaining real-world attack scenarios, and guiding customers toward the right risk mitigation decisions
• Lead high-stakes Cyber Risk Advisory sessions, contextualizing and prioritizing vulnerability and exposure findings, cyber risk trends, and overall security posture with the goal of facilitating measurable security outcomes
• Prioritized, context-driven remediation recommendations, helping customers focus on vulnerabilities most likely to be exploited by relevant threat actors
• Monitor customer environments for critical vulnerabilities, exposures, and emerging threats; escalate and advise on timely remediation with precision and urgency
• Ensure the Exposure Management service translates into measurable, reportable reductions in customers’ overall attack surface
• Serve as a technical quality bar for the team — reviewing advisor outputs, validating recommendations, and ensuring consistency and accuracy across all customer deliverables
• Build and maintain deep, trust-based relationships with customer stakeholders, serving as their primary strategic Exposure Management point of contact
• Identify customer expansion opportunities, risk posture trends, and service improvement areas; communicate these proactively to the Director of Operations
• Handle escalated customer issues with professionalism and urgency, driving fast resolution while preserving the customer relationship