Manager, Cyber Security

About mSupply

mSupply is North America’s leading distributor of OEM repair parts and equipment, serving professionals in the appliance, HVAC, plumbing, commercial kitchen, and pool/spa industries. Headquartered in St. Louis, MO, mSupply is a multi-billion-dollar enterprise offering an extensive product range, industry expertise, and seamless service. With more than 2,000 associates across the U.S. and Canada, mSupply’s family of brands delivers with speed, reliability, and precision through its branches, distribution centers, and extensive fleet of delivery vehicles. Shipped orders reach 93% of U.S. customers via next-day ground delivery and 100% within two days. For more information, visit mSupply.

Job Summary

The Cybersecurity Manager is a hands-on operational role that executes the organization's security program under the direction of the VP of IT Security. The Manager leads two Security Analysts, coordinates as a peer with the Senior Security Analyst, and works alongside the Security Administrator on deployments and operational support. This is a practitioner role requiring strong technical execution, compliance experience, and the ability to operate effectively in a focused security environment.

Job Duties & Responsibilities

• Lead daily alert triage, threat monitoring, and incident response across endpoint, network, and cloud environments
• Manage EDR/MDR and SIEM tooling within standards defined by the VP; serve as primary operational contact with MSSP providers
• Own the incident response process — contain, investigate, remediate, and document security events; conduct post-incident reviews and brief the VP on significant findings
• Monitor email security gateway activity and escalate threats or policy exceptions; coordinate with the Security Administrator who handles day-to-day gateway ticket management
• Direct and develop two Security Analysts — set priorities, manage workload, conduct performance reviews, and serve as the escalation point for investigations and technical decisions
• Execute and maintain PCI DSS controls within the program scope defined by the VP; coordinate evidence gathering and support annual assessment activities
• Support ISO 27001 control execution and documentation; work alongside the Security Administrator on evidence coordination as directed by the VP
• Conduct periodic vulnerability scans, track findings, and drive remediation to closure in coordination with IT infrastructure