A company with a pioneering past and a purposeful future.
At ACCO Brands, we are united by a common purpose, to empower our consumers to feel good when they work, learn, and play. For more than a century we have developed and nurtured brands that enable people to work with more productivity, learn with more confidence, and play with more enjoyment. We are passionate about a winning culture where we grow together, driving business, professional growth, and success. We invite you to be part of a team that is grounded in a history of category-leading brands and products and focused on positioning our company for the future.
ACCO Brands is seeking a dynamic, forward-thinking Sr. Cybersecurity Manager to lead a global team of cybersecurity analysts, secure ACCO Brands' global digital ecosystem, and drive cross-functional risk-reduction initiatives across business units and infrastructure teams. Reporting to the VP of Global Cybersecurity and Infrastructure, this role oversees day-to-day cybersecurity operations, drives strategic security initiatives, and serves as a key liaison across IT, business units, and external partners.
Strategy, Governance & Risk
- Partner with the VP of Global Cybersecurity and Infrastructure to align security initiatives with enterprise risk posture, compliance obligations, and business objectives, translating them into cybersecurity priorities and roadmaps.
- Leverage external security benchmarking and maturity assessments (e.g., BitSight, NIST) to develop cybersecurity performance metrics for executive leadership as part of broader risk and performance reporting.
- Represent Cybersecurity in enterprise-level initiatives and governance councils, influencing business decisions through security insights and risk intelligence.
- Lead enterprise-wide governance initiatives aligned with the NIST Cybersecurity Framework (CSF), translating technical risk into actionable business insights for executive stakeholders and identifying areas for improvement and control gaps.
- Define and track key performance indicators (KPIs) and control metrics aligned with NIST CSF functions.
- Contribute to and enforce cybersecurity policies, standards, and procedures that support compliance with PCI DSS, GDPR, SOX, and internal governance requirements.
- Drive control validation initiatives to ensure the ongoing effectiveness of technical and administrative safeguards.
Team Leadership & Development
- Lead, mentor, and manage a team of cybersecurity analysts and security engineers.
- Coordinate workload planning, performance evaluations, and skill development across the cybersecurity team.
- Foster a collaborative team culture through one-on-one coaching, career development, and goal setting.
Security Operations & Incident Response
- Oversee daily security operations, including monitoring, triage, and incident response, using tools such as Rapid7 InsightIDR and CrowdStrike Falcon.
- Serve as a key member of the cybersecurity incident response process, supporting the VP of Global Cybersecurity and Infrastructure from detection through resolution and post-incident review.
- Manage continuous threat detection, intelligence gathering, and escalation procedures.
- Oversee and guide analysts and engineers responsible for managing tools such as Proofpoint, Cisco Umbrella, SSO/MFA platforms, and next-generation firewalls, ensuring alignment with security strategy and best practices.
Vulnerability & Threat Management
- Manage the enterprise vulnerability management lifecycle, including identification, validation, and risk-based remediation.
- Partner with IT and infrastructure teams to validate remediation plans and enforce patching SLAs.
- Coordinate and advance internal remediation activities and processes to improve and maintain the organization's external risk posture.
Cloud & Application Security
- Oversee the development, implementation, and management of cloud security controls within Microsoft Azure and other cloud providers as applicable.
- Collaborate with application development teams to integrate security practices into the software development lifecycle (SDLC).
- Evaluate and enhance application security policies, secure coding practices, and code review procedures.
- Ensure secure configurations and identity management across cloud-native platforms.
- Partner with business and IT teams on security architecture reviews and secure project enablement.
Vendor, Third-Party & Awareness Programs
- Design and roll out a Third-Party Risk Management program to inventory and assess cybersecurity risk across third parties, and integrate findings into the enterprise risk posture.
- Manage vendor relationships, including MSSPs and security solution providers, to ensure alignment with program goals, service levels, and cost-effectiveness.
- Evaluate and review security tools and technologies, recommending improvements, replacements, or integrations that strengthen the security program.
- Own the strategy and execution of the enterprise-wide security awareness program, including phishing simulations, social engineering campaigns, annual Cybersecurity Awareness Month activities, and internal newsletters.
- Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent work experience.
- 10+ years of progressive experience in cybersecurity, including at least 2 years in a leadership or supervisory capacity.
- Demonstrated experience managing security operations, incident response, and vulnerability remediation in cloud environments.
- Experience working with Managed Security Service Providers (MSSPs).
- Strong working knowledge of security tooling, including SIEM platforms, EDR (e.g., CrowdStrike), and email security gateways (e.g., Proofpoint).
- Hands-on familiarity with Cisco Umbrella, Microsoft 365 security, SSO/MFA, NGAV/EDR, and enterprise firewall platforms.
- Solid understanding of enterprise IT, networking, identity and access management, encryption, and SIEM architecture.
- Familiarity with security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
- Working knowledge of AI governance principles and experience supporting the implementation of AI governance frameworks within an enterprise security program.
- Proven ability to manage competing priorities across multiple teams and time zones.
- Excellent verbal and written communication skills, with the ability to translate technical risk into business terms for executive audiences.
- Strong collaboration and stakeholder management skills across IT, business units, and external partners.
Preferred Qualifications
- CISSP, CISM, or CISA
- Cloud security certification (e.g., Microsoft Certified: Azure Security Engineer Associate)
- GIAC certifications (e.g., GCIH, GSEC) a plus
Salary Range: $140,000 - $180,000
#LI-Hybrid
About Us:
You know our brands. You love our brands. You just may not know they are ours.
If you have touched a PowerA® gaming controller, a Five Star® notebook, a Swingline® stapler, a Quartet® dry erase board, or a Kensington® computer mouse, you have touched part of ACCO Brands Corporation. With annual revenues of more than $1.5 Billion, ACCO Brands (NYSE: ACCO) designs, markets, manufactures, and sells branded academic, consumer, and business products globally. The power of our brands, our unmatched global customer reach, and our strategic market strengths put us in a position to achieve global leadership and growth. We're proud of our long history of industry leadership and innovation and are focused on delivering exceptional value to our customers by providing unique, cutting-edge, branded products.
What we offer:
- Comprehensive medical, prescription, dental, and vision plans
- 4% 401(k) match with immediate eligibility and vesting
- Competitive time off, available from the first day of employment
- Parental leave
- Company-paid life and disability benefits
- Critical illness, accident, and long-term care insurance options
- Employee and family assistance programs
Growing together is how we win.
With trusted brands, strong leadership, and a clear purpose, you’ll find opportunities to grow in your career, contribute to meaningful work, and be a part of a culture that values creativity and putting our consumers and customers first.
Apply now and build a successful future with ACCO Brands.
More information about ACCO Brands can be found at www.accobrands.com.
ACCO Brands has developed and maintains a written Affirmative Action Program (“AAP”) for protected veterans and individuals with disabilities. A copy can be requested from Human Resources. We are committed to providing equal employment opportunities to all employees and applicants.
Equal Opportunity Employer
ACCO Brands is an equal opportunity employer, and all qualified candidates will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, marital status, national origin, physical or mental disability, veteran status, or any other characteristic protected by applicable law. The company strives to create a winning culture with a leadership promise to provide equal access and opportunity for all to grow, succeed, and contribute to their full potential.
AODA
Accommodation for applicants with disabilities will be provided in all parts of the recruiting process as required under the ACCO Brands Canada AODA policy. Applicants are asked to make their needs known in advance.
