Sr. IT Security Manager

At Weber Blackstone, we believe the best moments happen outdoors while enjoying delicious food with your favorite people. We lead the industry in innovation, design, and consumer delight, and we’re fueled by people who are curious, bold, and collaborative. Whether you’re a seasoned pro or exploring a new craft, we want Weber Blackstone to be the spark that ignites your next career move. Join us on our journey to create world class products that redefine and reimagine outdoor cooking and deliver exceptional experiences for generations to come. Come be part of our BBQ!

Role Overview

About the role

We are bringing two companies' systems, people and partners onto one secure foundation. You will run the security operations that make that work: monitoring, response, vulnerability management, identity controls and the tools behind them.

You will work closely with the Sr. Director, IT Security & Infrastructure, who sets strategy and owns executive reporting, and turn that strategy into working controls. This is a hands-on role: you will lead the team and still investigate alerts, tune tools and run incidents yourself.

What you'll do

Security operations and incident response

• Manage daily detection and response, working with our managed security partner (MDR/MSSP) and escalating as needed.

• Triage and investigate alerts from EDR, SIEM, email security and cloud tools; tune rules to cut noise.

• Lead incident response for most incidents, and support the Sr. Director on major ones; keep playbooks current.

• Run tabletop exercises and post-incident reviews, and track follow-up actions to closure.

Vulnerability and infrastructure security

• Run vulnerability scanning and patch tracking across servers, endpoints, network and cloud, with clear remediation SLAs.

• Coordinate penetration tests and verify fixes.

• Maintain secure configuration baselines for endpoints, servers, firewalls and cloud accounts.

• Partner with Operations on basic protections for plant and warehouse systems (OT).

Identity and access

• Administer SSO, MFA and privileged access controls, and help unify identity across the Weber and Blackstone environments.

• Run quarterly access reviews and improve joiner–mover–leaver processes with HR and IT.

Risk and compliance support

• Gather evidence and remediate findings for PCI DSS, IT general controls and other audits.

• Complete security reviews of new vendors and SaaS tools against our third-party risk standard.

• Keep security policies and procedures up to date, and propose changes to the Sr. Director.

• Produce monthly security metrics: open vulnerabilities, incidents, patch compliance and phishing results.

Team and awareness

• Lead, coach and schedule a team of 2-3 security engineers and analysts, including on-call coverage.

• Run security awareness training and phishing simulations for offices, plants and distribution centers.

• Be the go-to security contact for IT, Engineering and business teams on day-to-day questions.

What you bring

• 6+ years in IT security or security-focused infrastructure roles, including 3+ years leading people, a team or major projects.

• Bachelor's degree in computer science, information systems or a related field, or equivalent experience.

• Hands-on experience with EDR, SIEM and email security tools, and with investigating and containing real incidents.

• Working knowledge of identity and access management: SSO, MFA, Active Directory or Entra ID, and privileged access.

• Experience running a vulnerability management program with scanning tools and patch tracking.

• Familiarity with security frameworks such as NIST CSF or CIS Controls, and with supporting PCI DSS or IT audits.

• Experience working with managed security providers and holding them to service levels.

• Clear writer and communicator who can explain risk to non-technical colleagues.

Nice to have

• Experience during a merger or acquisition, especially consolidating tools and identities across two IT environments.

• Experience in consumer products, manufacturing or retail, including exposure to OT or plant networks.

• Hands-on experience with CrowdStrike Falcon, Microsoft Defender, Splunk or similar platforms, and with Microsoft 365 or Google Workspace security.

• Cloud security experience in AWS, Azure or GCP.

• Scripting or automation skills (PowerShell, Python) for investigations and routine security tasks.

• Certifications such as CISSP

Benefits:

• Medical, dental, and vision coverage
• Life and disability insurance
• Employee Assistance Program (EAP)
• 401(k) with company match
• Eligible for paid time off (vacation, sick, personal, holiday)

Salary Range:

Utah: $140,000 - $157,000

Illinois: $150,000 - $165,000

* This salary range represents Weber Blackstone's good faith belief of what we reasonably expect to pay the top candidate