Sr. Manager, Information Security

Responsible for leading the day-to-day operations of a team of Information Security Analysts responsible for frontline monitoring and response to security alerts and incidents. Will work closely with IT leadership, security leadership, enterprise architecture, and business stakeholders to ensure the organization maintains effective, risk-based security practices that support business objectives.

Essential Duties and Responsibilities:

Security Operations Leadership

Lead and manage a team of Information Security Analysts responsible for monitoring, triaging, and responding to security alerts and incidents.

Serve as an escalation point and actively participate in incident response activities to ensure rapid containment and resolution of security events.

Establish and reinforce a culture of urgency, accountability, and continuous improvement within the security operations team.

Drive improvements in detection, response processes, playbooks, tooling, and operational effectiveness.

Challenge the status quo and identify opportunities to strengthen the organization’s defensive capabilities.

Program Leadership & Execution

Partner with leaders across Development, IT, Product, Operations, HR, Accounting, and Marketing to implement and operationalize the enterprise Information Security strategy.

Own and manage key components of the Information Security program, ensuring consistent execution across business units.

Translate strategic security objectives into actionable roadmaps, initiatives, and measurable outcomes.

Support cross-functional teams in addressing security risks and strengthening security practices across the organization.

Governance, Risk & Compliance

Stay informed on emerging vulnerabilities and threats and partner with IT teams to ensure timely remediation.

Operationalize the Information Security policy, standards, and guidelines framework.

Support the implementation and ongoing operation of the Information Security Management System (ISMS) aligned to recognized frameworks (e.g., NIST, SOC, SOX, COBIT).

Manage internal and external audit activities including security questionnaires, evidence collection, remediation tracking, and audit readiness.

Metrics, Reporting & Continuous Improvement

Develop and maintain security metrics and reporting that measure the effectiveness and maturity of the Information Security program.

Provide regular reporting and insights to senior leadership and governance committees, escalating risks and gaps when appropriate.

Identify and lead initiatives to improve security controls, processes, and operational maturity.

Awareness, Resilience & Risk Management

Oversee and mature the Security Awareness and Training program to strengthen the organization’s security culture.

Partner with IT and business leaders to support the maturity of Business Continuity and Disaster Recovery (BC/DR) programs.

Monitor emerging information security threats, risks, and regulatory trends, communicating relevant impacts to leadership.

Leadership & Culture

Mentor and develop Information Security Analysts, helping them grow technically and professionally.

Promote a proactive security culture by encouraging collaboration, knowledge sharing, and continuous learning.

Communicate security risks and priorities effectively to both technical and non-technical stakeholders.

Represent and reinforce the organization’s values and culture in all interactions.

Job Skills:

Security Operations Leadership

Incident Response Management

Program & People Leadership

Mentoring & Staff Development

Information Security Governance

IT Risk Management

IT Compliance & Regulatory Oversight

IT Audit & General Controls

NIST Risk Management Framework

SOX & SOC Controls

Metrics, Reporting & Security Program Maturity

Work Experience:

8–10 years of progressive experience in Information Security with demonstrated leadership across multiple security disciplines such as:

Security Incident Response