Information Security Manager

StackAdapt is a self-serve advertising platform that specializes in multi-channel solutions including native, display, video, connected TV, audio, in-game, and digital out-of-home ads. We empower hundreds of digitally-focused companies to deliver outcomes and exceptional campaign performance everyday. StackAdapt was founded with a vision to be more than an advertising platform, it’s a hub of innovation, imagination and creativity.
As a Information Security Manager, you will play a vital role in keeping StackAdapt’s systems and information secure by detailing and implementing enterprise security processes and procedures with an approach of continual process improvement and scalability. You will be responsible for identifying and remediating gaps in StackAdapt’s security systems, solutions and programs, as well as recommending specific measures that can improve StackAdapt’s overall security posture. 
You will undertake cyber security activities and contribute to the management of risks posed to StackAdapt’s systems and information, from both internal and external security threats. In addition, you will proactively engage with the Information Security community to identify and mitigate relevant cyber threats, investigate incidents and work with stakeholders to raise awareness of the importance of Information Security and ensure continued legal, contractual and regulatory compliance.
You will use your extensive knowledge of industry-standard frameworks, methodologies and good judgment to craft, implement, and coordinate systems that facilitate analysis of large sets of security data. In addition, you will collaborate across the Information Security department to identify, communicate, and remediate threats or vulnerabilities that may impact StackAdapt, our Team Members or our users and the community at large.  
StackAdapt is a ‘Remote First’ company, therefore we are open to candidates located anywhere in North America for this position. 

What you'll be doing:

• Acting as a driving force for operational standard methodologies and building cyber security detections, including implementation, maintenance, automation and continuous improvements. 
• Supporting the delivery of strategic security initiatives, as well as driving tactical security enhancements. 
• Managing / supporting incident response activities, including the collection of event data, detailed analysis of audit logs and reporting. 
• Providing security consultancy to individuals or projects led by the business, reviewing designs and following risk assessment/management procedures as required. 
• Overseeing vulnerability management procedures, including vulnerability scanning, reporting & analysis, validation, prioritisation and remediation. 
• Generating reports for IT administrators and business managers to evaluate the efficacy of the security policies and solutions in place. 
• Preparing and delivering security awareness training material for StackAdapt staff. 
• Providing assurance about internal security controls and mechanisms to clients. 
• Performing risk assessments of our third party suppliers, including assessing the maturity level of security controls and mechanisms operated by third party suppliers. 
• Providing assurance about internal security controls and mechanisms to clients. 
• Supporting StackAdapt’s continuous efforts to meet compliance requirements, for example detailing and evidencing key security controls and mechanisms to external auditors. 

What we're looking for:

• Experience in a wide range of cyber security domains, for example asset management, vulnerability management, network and host security and incident response. 
• Experience interpreting internal/external business challenges and the industry environment, resulting in an ability to provide key recommendations in order to improve products, processes or services. 
• Strong communication skills, an ability to influence senior stakeholders and an ability to communicate information to audiences with varying backgrounds and domain knowledge.
• Knowledge of different cyber security solutions and toolsets is beneficial (e.g. SIEM, EDR, SOAR, vulnerability scanning, email security gateways, internet proxies / gateways, etc.). 
• Experience with cloud computing services is beneficial (e.g. AWS, Azure, GCP, etc.). Experience creating, maintaining and delivering training and awareness material. 

We’ll be reaching out to applicants that have:

• 3+ years of work in a related field. 
• Bachelor’s degree (or higher) in Computer Science or a related field; or a combination of relevant education, experience, and training. 
• Knowledge of current hacking techniques, vulnerability disclosures, data breach incidents, and security analysis techniques. 
• An ability to develop specific expertise, dis