Manager, Infrastructure Governance

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and mentor a high-performing team of Cloud Engineers.

• Promote professional development and cultivate a culture focused on proactive exposure management.

• Broaden governance beyond Cloud Security Posture Management (CSPM) and firewall rule monitoring to include security policy enforcement, vulnerability management, data protection, and application security management.

• Advocate for automation and AI to achieve real-time compliance results, diminish manual verification cycles, and expedite cloud-risk auto-remediation.

• Oversee firewall rule policies and manage the rule certification program for relevant firewalls.

• Supervise CSPM and cloud-native security solutions across GCP, Azure, and AWS.

• Coordinate remediation efforts for non-compliant issues utilizing ServiceNow and GRC platforms.

• Manage SOX server quarterly certifications and address any findings.

• Analyze and resolve non-compliance issues, including deprecated network protocols, least-privilege violations, and policy configuration drift.

• Maintain responsibility for approved exceptions and their remediation, renewal, or closure.

• Develop governance metrics and deliver monthly KPI/KRI reports and quarterly Reports of Compliance (ROC) for executive leadership.

• Assist in FDA audits and HITRUST certifications by providing necessary evidence and reporting.

• Drive security onboarding processes for mergers and acquisitions.

• Collaborate with Enterprise Technology Platform, InfoSec Operations, and Cyber Operations teams.

• Support foundational programs such as Unified Vulnerability Management (UVM).

• Oversee department operations and supervise professional employees, front-line supervisors, and/or business support staff.

• Engage in the development of policies and procedures while achieving consensus among stakeholders.

⛳️ Requirements

• 4 to 6 years of progressive experience in security compliance governance, cloud security engineering, or a similar technical risk management role is preferred.

• Proven experience in leading, mentoring, or providing technical direction to a team of engineering professionals.

• Extensive, hands-on knowledge of multi-cloud environments, notably Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS).

• Familiarity with security frameworks, especially the NIST CSF (Cybersecurity Framework).

• Strong understanding of industry regulations and compliance standards, including HIPAA, HITRUST, SOX, and GDPR.

• Experience with GRC platforms, ServiceNow, and cloud-native security tools (e.g., Prisma, Wiz, Sentinel, or cloud-native CSPMs).

• Bachelor’s degree in a related field, or equivalent work experience, is preferred.

• Ability to manage department operations and supervise professional employees, front-line supervisors, and/or business support staff.

• Capacity to engage in the development of policies and procedures.

• Competence to ensure employees operate within established guidelines.

• Ability to interact effectively with subordinates, peers, customers, suppliers, and senior management at various levels.

• Capability to resolve operational and project-related issues and achieve consensus.

🏝️ Benefits

• Bonus eligible.

• Medical, dental, and vision coverage.

• Paid time off plan.

• Health savings account (HSA).

• 401k savings plan.

• Access to wages before payday with myFlexPay.

• Flexible spending accounts (FSAs).

• Short- and long-term disability coverage.

• Work-Life resources.

• Paid parental leave.

• Healthy lifestyle programs.