Senior Manager, Cyber Tech, Trust and Mitigation

Who We Are:

• Coca-Cola Beverages Florida, LLC (Coke Florida) is a family-owned independent Coca-Cola bottler that is the third largest privately-held and the sixth largest independent Coca-Cola bottler in the United States.
• Coke Florida sells, markets, manufactures and distributes over 600 products of The Coca-Cola Company and other partner companies including Monster Beverage Corporation and BODYARMOR.
• In 2026, for the 5th year in a row, Coke Florida was named as a US Best Managed Company by Deloitte Private and The Wall Street Journal. This program recognizes outstanding U.S. private companies and the achievements of their management teams in four key areas: strategy, ability to execute, corporate culture, and governance/financial performance.

What We Offer:

Eligible full time Coke Florida Associates can participate in our Total Rewards Program which includes:

• Total Wellness Programs including health, dental and vision plans
• 401K program with healthy company match
• Supplemental Life Insurance
• Three weeks of vacation pay, and 10 company paid holidays*
• Tuition reimbursement
• Employee Assistance Programs (EAP)
• Competitive compensation

Coke Florida is looking for a Technology Sr Manager Cyber Tech, Trust, & Mitigation based out of our Tampa location. We're currently looking for first shift, working Monday through Friday from 8:30AM-5PM.

The Senior Manager Cyber Technology, Trust, Mitigations ensures adherence to regulatory, contractual, and internal security requirements. They will provide strategic leadership, drive security maturity, and partner with executives, IT, and business stakeholders to align security initiatives with enterprise risk management. This role involves overseeing the development, implementation, and maintenance of enterprise-level cyber security software, integrating various systems, and driving continuous improvement in IT Infrastructure processes across the enterprise to include managing the SOC. This involves leading a team, partnering with various departments, and leveraging technology to enhance cyber security and compliance. This leader manages teams, budgets, and timelines for cyber security projects, ensuring alignment with business objectives and compliance with industry standards. In addition, this role will require not only strategic thinking but also the mindset that this is a business and should be managed, e.g. benchmarking, internal marketing etc. To this end, this role partners closely with business unit leadership, vendors, and executive stakeholders to enable business growth, ensure resiliency, and protect critical information assets.

Key Accountability Bullets:

Overall

• Design and execute adoption programs and leverage data-driven insights to cyber security and compliance.
• In partnership with IT leadership, establish KPIs and performance metrics, generate reports and dashboards for insights, and monitor market trends.
• Develop and implement disaster recovery in support of business continuity plans to ensure system availability during emergencies, conducting regular testing and updates of recovery.
• Drive continuous improvement in cyber security systems, processes and methodologies, leveraging technology to enhance efficiency and effectiveness.
• Analyze and streamline cyber security processes and implement best practices with the goals of improving security key measurable outcomes.
• Ensure that all technology solutions and processes comply with industry standards and regulatory requirements.
• Identify and evaluate emerging technologies and trends in cyber security technologies recommending and implementing innovative solutions.
• Generate reports and dashboards for insights, performance, and operations
• Experience leading in multi-business unit environments

Cybersecurity Operations & Incident Response

• Lead the cybersecurity operations function including monitoring, detection, investigation, and response.
• Direct enterprise-wide incident response, ensuring rapid containment, root cause analysis, and lessons learned.
• Oversee vulnerability management and remediation across business units.
• Partner with IT and business leaders to embed proactive risk mitigation into daily operations.

Governance, Risk & Compliance (GRC)

• Develop, maintain, and enforce enterprise security policies, standards, and procedures.
• Manage regulatory compliance programs (e.g., HIPAA, PCI, SOX, GDPR, NIST, ISO 27001) across diverse business units.
• Own the risk management framework, ensuring risk assessments, control testing, and remediation are performed consistently.
• Coordinate third-party risk management, vendor due diligence, and audit activities.

Leadership & Strategy

• Serve as the senior security leader across multiple business units, balancing global standards with local business needs.
• Build and lead a high-performing team of analysts, engineers, and compliance professionals.
• Provide executive-level reporting on cyber risk, incident trends, and compliance posture.
• Drive security awareness and training initiatives to strengthen organizational culture.
• Collaborate with infrastructure, applications, legal, and compliance teams to ensure holistic security coverage.

Program Development & Continuous Improvement

• Establish and monitor KPIs and SLAs for security operations and compliance effectiveness.
• Lead annual risk assessments, tabletop exercises, and business continuity testing.
• Implement security automation and orchestration to improve response efficiency.
• Benchmark against industry frameworks to guide maturity roadmap.

Financial & Vendor Management

• Own the cyber security budget, driving cost optimization and reinvestment into modernization initiatives.
• Negotiate and manage contracts for hardware, software, cloud services/SaaS, and third-party providers.
• Track and report on spend, savings, and ROI from infrastructure initiatives.
• Ensure high availability, disaster recovery, and business continuity across platforms.
• Establish and monitor SLAs, KPIs, and operational metrics to drive service quality and performance.
• Lead vendor and managed service provider relationships, ensuring cost-effective and high-quality service delivery.

People & Team Leadership

• Lead, mentor, and develop a team of cyber security and compliance specialists.
• Foster a culture of accountability, innovation, and continuous improvement.
• Partner with infrastructure and application teams to ensure secure, integrated IT services.

Key Goals/Metrics:

• SLAs for cyber security and meet compliance requirements
• Manage and meet budgetary goals
• Develop a roadmap and long-term vision/strategy for cyber security
• Drive automation into cyber security

Top 3 Competencies:

• Strategic thinking to align cyber security and compliance across the business and with IT strategy
• Collaboration/relationship skills across business units/affiliates and IT
• Technical leadership and decision-making as well as team development

Skills & Other Requirements

Qualified candidates must possess:

• Education: Bachelor's degree in Information Security, Computer Science, or related field (Master's preferred) or equivalent experience
• Certifications (preferred): CISSP, CISM, CISA, CRISC, or equivalent.
• Experience:
• 12+ years of cyber security experience, with at least 5+ years in management role leading cyber security and GRC.
• Ability to transform this area to be run as a business and to successfully be able to influence peers and stakeholders alike to engage this role as partnership rather than as an "order taker."
• Proven experience managing cybersecurity operations, incident response, and GRC programs across large, complex organizations.
• Strong knowledge of regulatory frameworks and security standards (NIST, ISO, SOC, HIPAA, PCI, SOX, GDPR, etc.).
• Track record of building and maturing cross-business-unit security programs.
• Skills:
• Executive presence with the ability to brief boards, regulators, and senior executives.
• Strong leadership, coaching, and organizational skills.
• Ability to balance strategic vision with hands-on execution.
• Additional Qualifications for success in this role:
• Experience with AI and requirements for cyber security utilization of AI
• Results Oriented - Self-motivated driving through obstacles to accomplish objectives with a bias for action resulting in a strong track record of delivering results
• Strategic thinking and the ability to develop and implement strategic plans that align with business objectives and business cases.
• Collaboration & Teamwork - Able to create effective working relationships with a strong sense of commitment to a course of action holding people accountable while maintaining positive working relationships
• Prioritization - Ability to prioritize multiple objectives/goals based on opportunities and situations needed to deliver the business results, and can anticipate adjustments that may be needed to resolve issues and obstacles
• Interpersonal skills - Able to successfully engage and work with all levels of the organization and external partners through effective communication, written and verbal skills
• Experience in leading and managing change within an organization
• Exhibit professional maturity - respecting other's roles and opinions, keeping personal opinions at minimum about products and programs, speaking up at meetings with pertinent, relevant input, engaging and open body language, staying engaged during meetings

This job description is not an exhaustive list of all functions that the employee may be required to perform, and the employee may be required to perform additional functions. Coke Florida reserves the right to revise the job description at any time and to assign additional duties and responsibilities as needed.

Employment with Coke Florida is at-will. The employee must be able to perform the essential functions of the position satisfactorily and, if requested, reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential functions of their job, absent undue hardship.

Coca-Cola Beverages Florida is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class.