Staff Program Manager, Information Security

About Redwood Materials

Redwood is localizing a global battery supply chain that seamlessly integrates recovery, reuse, and recycling — keeping critical minerals in circulation and driving the energy transition. Founded in 2019, we’re delivering low-cost and large-scale energy storage and producing battery materials in the U.S. for the first time, all from batteries we already have.

Staff Program Manager, Information Security

Essential Duties: 

We are seeking an experienced Senior Information Security Program Manager for Governance, Risk and Compliance, to lead the preparation and ongoing audit readiness of the Information Security program to ensure the organization's compliance with industry standards. In collaboration with the IT, Enterprise Risk and Compliance, and Quality Assurance teams, and as a representative of the Information Security program, you will drive the maturity of our Information Security Compliance Program, focusing on control ownership and risk management while providing pragmatic, risk-centric advisory services to stakeholders. 

This role offers the opportunity to shape the security posture of a rapidly growing organization while contributing to our mission of sustainable technology innovation. 

 

Responsibilities Will Include: 

• Design and execute the strategic vision for our Information Security GRC program 
• Develop and maintain the Information Security Governance, Risk, and Compliance program, creating policies, procedures, and extending organizational capabilities while ensuring alignment with industry best practices 
• Drive cross-functional collaboration with IT, Enterprise Risk and Compliance, and other operational teams to implement secure, consistent patterns and expand observability 
• Identify and prioritize opportunities for improving organizational risk posture 
• Create and maintain comprehensive Information Security documentation, including a knowledge base, compliance reports, risk registers, and policy documentation 
• Serve as a subject matter expert in:
  • Developing and managing the Compliance Program
  • Coordinating Audit Evidence Gathering 
  • Overseeing User Access Reviews
  • Developing Policies and Processes
  • Managing Change Management Processes 
  • Conducting Risk Assessments and Mitigation 
  • Leading Security Awareness and Training Programs
• Own and maintain Third Party Risk Management evaluation practices 
• Maintain the Information Security policy portfolio 
• Manage operational c