Senior Manager, Information Security

Role Overview

The Senior Manager of Information Security Engineering leads a team of Information Security Engineers and is accountable for the strategy, delivery, reliability, and maturity of the organization’s security engineering service areas, processes, and technologies.

What You Will Do

Lead a team of Information Security Engineers, own the security engineering technical stack, drive continuous improvement, and partner with cross-functional teams to ensure security capabilities are effectively engineered and maintained.

Why It Might Be a Fit

This role requires strong leadership and people management skills, experience in security engineering, and the ability to communicate complex technical topics to non-technical stakeholders.

Requirements

• Bachelor’s degree in computer science, Information Technology, Information Security, or related field, or equivalent relevant experience
• 10+ years of progressive experience in information security, with significant focus on security engineering, security technologies, and operational enablement
• Proven experience leading a security engineering team responsible for enterprise security tooling and technical controls
• Strong leadership and people management skills, with experience developing and coaching teams of security professionals
• In-depth knowledge of security technologies and controls such as network security, endpoint protection, identity and access security, privileged access concepts, logging and monitoring platforms, and security automation
• Demonstrated success maturing engineering-related security processes such as log governance, access review enablement, detection reliability, control administration, and audit support
• Ability to prioritize urgent operational work while continuing to deliver planned roadmap initiatives
• Strong capability in translating technical security issues into concise, leadership-level communications and recommendations
• Experience working cross-functionally with Legal, Audit, Infrastructure, HRIS, PMO, and other enterprise stakeholders
• Familiarity with regulatory and control frameworks such as PCI, SOX, CCPA, and NIST 800-53
• Excellent verbal and written communication skills, including the ability to communicate complex technical topics to non-technical stakeholders
• Relevant certifications such as CISSP, CISM, or CISA are a plus

Benefits

• Equal Employment Opportunity employer
• Employment based solely on merit and qualifications
• No discrimination against any employee or applicant on the basis of protected characteristics