Senior Manager, Information Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and oversee Information Security Analysts responsible for monitoring, triaging, and responding to security alerts and incidents.

• Act as an escalation point and engage in incident response for swift containment and resolution.

• Foster a culture centered on urgency, accountability, and ongoing improvement.

• Enhance detection, response processes, playbooks, tools, and operational effectiveness.

• Collaborate with leaders from Development, IT, Product, Operations, HR, Accounting, and Marketing to execute the enterprise Information Security strategy.

• Own and manage critical elements of the Information Security program.

• Convert strategic security objectives into actionable roadmaps, initiatives, and measurable outcomes.

• Assist teams in addressing security risks and bolstering security practices.

• Keep track of emerging vulnerabilities and threats while facilitating timely remediation.

• Operationalize Information Security policies, standards, and guidelines.

• Support the operation of the ISMS in alignment with NIST, SOC, SOX, and COBIT frameworks.

• Manage internal and external audits, security questionnaires, evidence collection, remediation tracking, and audit preparedness.

• Create security metrics and reports on program effectiveness and maturity.

• Provide insights and escalate risks and gaps to senior leadership and governance committees.

• Drive initiatives aimed at enhancing security controls, processes, and operational maturity.

• Oversee and develop the Security Awareness and Training program.

• Contribute to the maturation of the Business Continuity and Disaster Recovery program.

• Monitor threats, risks, and regulatory trends and convey impacts to leadership.

• Mentor and develop Information Security Analysts.

• Encourage collaboration, knowledge sharing, and continuous learning.

• Communicate security risks and priorities to both technical and non-technical stakeholders.

• Represent and uphold the organization’s values and culture.

⛳️ Requirements

• 8–10 years of progressive experience in Information Security, showcasing leadership across various security disciplines.

• Experience in security incident response, security operations/SOC leadership, GRC, business continuity and disaster recovery, security awareness and training, security administration or controls management, and regulatory and audit oversight.

• Proven experience leading analysts tasked with monitoring and responding to security alerts.

• Demonstrated capability to drive operational enhancements and hold teams accountable for outcomes.

• Hands-on experience supporting audits, completing security questionnaires, and collecting evidence.

• Proven ability to manage multiple initiatives, priorities, and stakeholders simultaneously.

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field (or equivalent experience).

• CISSP, CCSP, or CISM certification.

• Must be willing to travel occasionally as business needs require.

• Ability to work onsite in a Corporate or Campus location may be necessary based on the role.

• For offsite or hybrid roles, access to an appropriate remote work environment with privacy, reliable internet, phone, and video conferencing is essential.

• Capacity to meet critical thinking and problem-solving demands and communicate effectively with colleagues.

• Availability to work over 40 hours per week when business needs dictate.

• Capability to access information using a computer.

🏝️ Benefits

• Medical, dental, vision, life, and disability plans.

• Well-being incentives.

• Parental leave.

• Paid time off.

• Certain paid holidays.

• Tax-saving accounts (FSA, HSA).

• 401(k) retirement benefit.

• Employee Stock Purchase Plan.

• Tuition assistance.

• Entertainment and retail discounts.

• Overtime pay for eligible non-exempt employees.

• Reasonable accommodations in accordance with ADA policies.