Senior InfoSec Program Manager

This is a fully remote position, open to applicants in California.

📋 Description

• Oversee the execution-level security program roadmap across all security functions.

• Monitor initiatives, timelines, and obstacles independently, minimizing the need for daily VP involvement.

• Manage dependencies across Engineering, IT, Legal, and Compliance teams.

• Operate with delegated authority from the VP regarding operational execution matters.

• Develop and sustain the security metrics framework, which includes vulnerability SLA compliance, incident-response timelines, audit-finding closures, and training completion rates.

• Create dashboards for board reporting, SEC disclosure preparation, audit-committee updates, and customer security assessments.

• Convert raw data from tools and teams into a cohesive program narrative suitable for executive and external audiences.

• Oversee the collection of security-team evidence for SOC 2, ISO 27001, PCI-DSS, and customer audits.

• Act as the security team's liaison to the General Counsel's Compliance team.

• Keep audit-readiness documentation updated throughout the year and track findings until they are resolved.

• Manage the security policy lifecycle, including annual reviews, version control, approvals, and accessibility.

• Lead the security awareness and training program, which encompasses phishing simulations.

• Handle security-tool contracts, renewals, license utilization, and logistics related to the MSSP relationship.

⛳️ Requirements

• Knowledge, skills, and abilities typically acquired through 5–8 years in security or IT program management, or in a security operations coordination role.

• Familiarity with NIST CSF, SOC 2, ISO 27001, and PCI-DSS.

• Experience in cross-functional program management within a regulated or compliance-focused environment.

• Excellent written communication skills for producing executive reports and board materials.

• Proven experience in coordinating audits, including evidence collection and tracking findings.

🏝️ Benefits

• Wellness: Options for universal, supplemental, and private healthcare plans tailored to country specifics.

• Financial future: Contributions to retirement/pension plans and participation in the MTK stock plan.

• Income protection: Coverage for life events and disabilities.

• Paid time off: Generous annual leave, company holidays, and volunteer time off.

• Learning: Access to an e-learning license, tuition reimbursement, and participation in hackathons.

• Home office setup allowance.

• Additional/optional benefits: Pet insurance, identity theft protection, and legal assistance.