Sr. Manager, Information Security

Responsible for leading the day-to-day operations of a team of Information Security Analysts responsible for frontline monitoring and response to security alerts and incidents. Will work closely with IT leadership, security leadership, enterprise architecture, and business stakeholders to ensure the organization maintains effective, risk-based security practices that support business objectives.

Essential Duties and Responsibilities:

Security Operations Leadership

• Lead and manage a team of Information Security Analysts responsible for monitoring, triaging, and responding to security alerts and incidents.
• Serve as an escalation point and actively participate in incident response activities to ensure rapid containment and resolution of security events.
• Establish and reinforce a culture of urgency, accountability, and continuous improvement within the security operations team.
• Drive improvements in detection, response processes, playbooks, tooling, and operational effectiveness.
• Challenge the status quo and identify opportunities to strengthen the organization’s defensive capabilities.

Program Leadership & Execution

• Partner with leaders across Development, IT, Product, Operations, HR, Accounting, and Marketing to implement and operationalize the enterprise Information Security strategy.
• Own and manage key components of the Information Security program, ensuring consistent execution across business units.
• Translate strategic security objectives into actionable roadmaps, initiatives, and measurable outcomes.
• Support cross-functional teams in addressing security risks and strengthening security practices across the organization.

Governance, Risk & Compliance

• Stay informed on emerging vulnerabilities and threats and partner with IT teams to ensure timely remediation.
• Operationalize the Information Security policy, standards, and guidelines framework.
• Support the implementation and ongoing operation of the Information Security Management System (ISMS) aligned to recognized frameworks (e.g., NIST, SOC, SOX, COBIT).
• Manage internal and external audit activities including security questionnaires, evidence collection, remediation tracking, and audit readiness.

Metrics, Reporting & Continuous Improvement

• Develop and maintain security metrics and reporting that measure the effectiveness and maturity of the Information Security program.
• Provide regular reporting and insights to senior leadership and governance committees, escalating risks and gaps when appropriate.
• Identify and lead initiatives to improve security controls, processes, and operational maturity.

Awareness, Resilience & Risk Management

• Oversee and mature the Security Awareness and Training program to strengthen the organization’s security culture.
• Partner with IT and business leaders to support the maturity of Business Continuity and Disaster Recovery (BC/DR) programs.
• Monitor emerging information security threats, risks, and regulatory trends, communicating relevant impacts to leadership.

Leadership & Culture

• Mentor and develop Information Security Analysts, helping them grow technically and professionally.
• Promote a proactive security culture by encouraging collaboration, knowledge sharing, and continuous learning.
• Communicate security risks and priorities effectively to both technical and non-technical stakeholders.
• Represent and reinforce the organization’s values and culture in all interactions.

Job Skills:

• Security Operations Leadership
• Incident Response Management
• Program & People Leadership
• Mentoring & Staff Development
• Information Security Governance
• IT Risk Management
• IT Compliance & Regulatory Oversight
• IT Audit & General Controls
• NIST Risk Management Framework
• SOX & SOC Controls
• Metrics, Reporting & Security Program Maturity

Work Experience:

• 8–10 years of progressive experience in Information Security with demonstrated leadership across multiple security disciplines such as:
• Security Incident Response
• Security Operations / SOC leadership
• Governance, Risk, and Compliance (GRC)
• Business Continuity & Disaster Recovery
• Security Awareness & Training
• Security Administration or Controls Management
• Regulatory and Audit Oversight
• Experience leading analysts responsible for monitoring and responding to security alerts. Proven ability to drive operational improvements and hold teams accountable for results. Hands-on experience supporting audits, comple