Manager, Infrastructure Governance

This is a fully remote position, open to applicants in Ohio.

📋 Description

• Lead and guide a high-performing team of Cloud Engineers, promoting professional development and cultivating a culture focused on proactive exposure management.

• Broaden the governance scope to encompass more than just Cloud Security Posture Management (CSPM) and firewall rule monitoring, extending into comprehensive enforcement of security policies, vulnerability management, data protection, and application security.

• Advocate for Automation & AI to achieve real-time compliance outcomes, minimize manual verification cycles, and expedite the auto-remediation of cloud-related risks.

• Govern Firewall Rule Policies to ensure alignment with network standards and oversee the rule certification program for all relevant firewalls.

• Supervise CSPM and cloud-native security solutions across GCP, Azure, and AWS platforms.

• Coordinate remediation efforts for non-compliant issues through ServiceNow and GRC platforms.

• Oversee quarterly certifications for SOX servers and address any findings.

• Analyze non-compliance issues, including deprecated network protocols, least-privilege violations, and configuration drift.

• Maintain responsibility for approved exceptions and their remediation, renewal, or closure.

• Develop governance metrics and present monthly KPI/KRI reports along with quarterly Reports of Compliance (ROC) to executive leadership.

• Assist in regulatory audits as a stakeholder and provide evidence for FDA audits and HITRUST certifications.

• Spearhead M&A security onboarding and facilitate the integration of newly acquired entities onto Infrastructure Governance platforms.

• Align with Cyber Operations strategies and support initiatives such as Unified Vulnerability Management (UVM).

• Oversee department operations and manage professional employees, frontline supervisors, and/or business support staff.

• Engage in the development of policies and procedures, interact with stakeholders at various management levels, resolve operational/project issues, and achieve consensus.

⛳️ Requirements

• 4 to 6 years of progressive experience in security compliance governance, cloud security engineering, or a similar technical risk management position is preferred.

• Proven experience in leading, mentoring, or technically directing a team of engineering professionals.

• Extensive practical knowledge of multi-cloud environments, particularly Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS).

• Familiarity with security frameworks, especially NIST CSF (Cybersecurity Framework).

• Strong understanding of industry regulations and compliance standards, including HIPAA, HITRUST, SOX, and GDPR.

• Experience with GRC platforms, ServiceNow, and cloud-native security tools (e.g., Prisma, Wiz, Sentinel, or cloud-native CSPMs).

• Bachelor’s degree in a related field, or equivalent work experience, is preferred.

• Ability to manage department operations and oversee professional employees, frontline supervisors, and/or business support staff.

• Capability to contribute to the development of policies and procedures to meet specific objectives.

• Competence in ensuring employees operate within established guidelines.

• Proficiency in interacting with subordinates, peers, customers, suppliers, and senior management at various levels.

• Skill in resolving issues related to operations and/or projects.

• Ability to build consensus among various stakeholders involved.

🏝️ Benefits

• Bonus eligible.

• Medical, dental, and vision coverage.

• Paid time off plan.

• Health savings account (HSA).

• 401k savings plan.

• Access to wages before payday with myFlexPay.

• Flexible spending accounts (FSAs).

• Short- and long-term disability coverage.

• Work-Life resources.

• Paid parental leave.

• Healthy lifestyle programs.