The Senior Manager, Information Security, leads the organization’s cybersecurity strategy, governance, and operational security programs while ensuring compliance with legal and regulatory requirements.
Requirements
- Develop and implement the organization’s information security strategy, policies, and governance frameworks aligned with business and legal requirements.
- Lead risk assessments, vulnerability management, and enterprise security risk mitigation initiatives.
- Ensure compliance with industry standards and regulatory frameworks such as SOC 2, ISO 27001, GDPR, NIST, and CIS.
- Oversee day-to-day security operations, including threat monitoring, vulnerability management, detection, and incident response processes.
- Ensure the security of cloud environments, networks, applications, and internal infrastructure, including controls such as firewalls, encryption, and identity management.
- Partner with IT, engineering, DevOps, product, and legal teams to integrate security into systems and development processes.
- Lead and mentor security engineers and analysts, promote security awareness, and report security posture and risks to executive leadership.