Senior Manager – Information Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of and enhance the information security program in accordance with ISO 27001 and SOC 2 standards, including the transition to SOC 2 Type 2.

• Create, formalize, and uphold security policies, standards, and procedures.

• Conduct risk assessments, control testing, collect audit evidence, and monitor remediation efforts.

• Oversee external auditors, penetration testing teams, and compliance partners.

• Manage security for infrastructure, networks, AWS/GCP cloud environments, and applications.

• Develop strategy and roadmap for IAM, network and cloud security architecture, endpoint protection, vulnerability management, logging/monitoring, and incident response.

• Establish and enhance secure SDLC practices, including threat modeling, secure code review, dependency and supply-chain security, and CI/CD pipeline security.

• Create incident response plans, conduct tabletop exercises, and lead response efforts.

• Lead, mentor, and grow the security team.

• Define collaboration models with Engineering and Product teams to reduce friction and rework.

• Act as the primary security representative for Engineering, Product, IT, Legal, and executive leadership.

• Communicate security risks in business language to leadership and the board.

• Assist sales and customer trust initiatives through security questionnaires, customer audits, and the trust center.

• Ensure that policies and procedures are operational, team workflows are proactive, SOC 2 Type 2 is on track, security tools minimize engineering friction, and incident response is tested.

⛳️ Requirements

• Bachelor's degree in Information Security, Computer Science, Computer Engineering, or a related field, or equivalent professional experience.

• 6-8+ years of experience in information security.

• 3+ years in a leadership position overseeing a security program from start to finish.

• Direct experience working within ISO 27001 and SOC 2 frameworks.

• Strong technical expertise in cloud security (AWS/GCP), network security, and modern application security.

• Familiarity with SDLC and Application Security tooling.

• Experience in container/Kubernetes security is advantageous.

• Proven experience in developing or revising policies and procedures in a growing SaaS environment.

• Experience in leading security teams.

• Experience managing external auditors, penetration testing teams, and compliance vendors.

• Exceptional communication skills.

• CISSP, CISM, or a similar certification is a plus.

• Familiarity with ISO 27701 and the NIST Cybersecurity Framework is a plus.

• No sponsorship is provided.

🏝️ Benefits

• Up to 15% bonus.

• Equity.

• 401k plan with company match.

• Basic life insurance.

• Health benefits.

• Dental benefits.

• Vision benefits.

• Additional benefits and perks.