Job Description

Position Overview:

The Senior Manager of Information Security leads enterprise-wide security strategy, risk management, and data protection efforts. This role is responsible for developing and enforcing policies, managing cybersecurity operations, and aligning security initiatives with business goals. They serve as the primary escalation point for incidents and partner with IT, Legal, Finance, and executive leadership to ensure compliance and resilience across the organization.

Key Responsibilities:

• Design and implement company-wide security strategies, frameworks, and policies

• Lead incident response, vulnerability management, and threat intelligence efforts

• Manage security operations and technology across cloud, on-prem, and hybrid environments

• Ensure compliance with security and regulatory frameworks (NIST, ISO, PCI, SOC 2, GDPR, SOX)

• Partner with Finance, Internal Audit, and external auditors to support SOX and PCI compliance, including audit preparation and remediation efforts

• Oversee third-party risk management and vendor security reviews

• Present security risks, controls, and KPIs to executives and key stakeholders

• Lead company-wide security awareness and training programs

Qualifications:

• 10+ years of experience in information security, with 5–10 years in a leadership role

• Strong knowledge of cybersecurity frameworks, governance, and security architecture

• Hands-on experience with enterprise security tools in cloud, on-prem, and hybrid environments. Preferred knowledge and experience with existing tools such as SentinelOne, Guardicore, Check Point, KnowBe4, Tenable, BigID, ShareFile, Imperva, DataGrail, Zilla, and AuditBoard

• Excellent communication, influencing, and cross-functional leadership skills

• Bachelor’s degree required; CISSP, CISM, or similar certifications strongly preferred

Team & Travel:

• Minimal travel required

Job Tags

Similar Jobs