Jobs and Careers

Senior Manager, Information Security

3Degrees

San Francisco, United Statesfull_timeVerifiedPosted 2 Feb 2025

💰 $197,000/yr($172,000/yr – $197,000/yr)

About the role

Every day, we work together for what matters – bold, swift, and equitable climate action.

ABOUT THE ROLE

At 3Degrees, we're seeking an experienced Information Security professional to join our dynamic and growing team. In this role, you will play a critical role in safeguarding our organization, particularly as we transition to a new trading system and data warehouse. You will be responsible for developing and implementing a comprehensive cybersecurity strategy, managing a team of security professionals, and mitigating risks to our systems and data.You'll bring your deep technical expertise, your strong understanding of cybersecurity, and your experience in addressing critical gaps to lead the team in developing and implementing a comprehensive cybersecurity strategy aligned with the organization's business objectives. This is a full-time, exempt role reporting to our Chief Product & Technology Officer. It is open to candidates ideally based in the San Francisco Bay Area, but exceptional candidates based in other time zones may be considered. In addition, you agree to travel periodically to a 3Degrees office for training or team collaboration and to conferences as required. Frequency and cadence are dependent, but on average, they are 1-6 times annually. Remote workers agree that their home office provides a comfortable and productive environment that enables success as a “remote” employee.

Please Note: 3Degrees does not provide sponsorship and/or relocation assistance; therefore, pre-existing right-to-work status is a prerequisite to be considered for this position.

WHAT YOU’LL DO

Strategic Leadership: Develop and execute a long-term cybersecurity strategy aligned with the organization's business objectives, with a particular focus on securing our new trading system and data warehouse, collaboration platforms, and customer-facing web applications.
Risk Management and Audits: Conduct and report out on regular risk assessments, identify vulnerabilities, and implement effective security controls. Lead regulatory security audits and assessments to ensure the organization's security posture is optimally derisked.
Incident Response: Lead incident response efforts, including investigation, containment, eradication, and recovery, particularly in the event of a breach affecting the new trading system or data warehouse.
Regulatory Compliance: Ensure compliance with industry regulations and standards, such as SOC, ISO, GDPR, CCPA, and HIPAA, especially as they relate to the new trading system and data warehouse.
Team Management: Lead and mentor a high-performing security team, with a focus on building expertise in securing complex systems like our new trading system and data warehouse, while fostering a culture of innovation and continuous improvement.
Technology Evaluation and Implementation: Evaluate and implement new security technologies, including AI-powered solutions, to protect the new trading system and data warehouse.
Policy and Procedure Development: Create and maintain security policies and procedures, ensuring they are tailored to the specific security needs of the new trading system and data warehouse.
Training and Best Practices: Support the development and delivery of training sessions for employees on security best practices, focusing on phishing prevention, password management, and compliance.

ABOUT YOUYou are a seasoned cybersecurity professional with hands-on security experience in high-impact environments, ideally supporting global enterprises. You have a security-first mindset, ensuring our infrastructure is fortified and security threats are proactively managed. You thrive in a fast-paced, constantly evolving environment. You come equipped with real-world expertise where you have learned from both successes and challenges in the field. We believe that an individual with the following experience will have the best opportunity for success in this role:

Hands-On Leadership: 10+ years of experience in leadership roles developing and successfully implementing cybersecurity strategies, with a strong focus on hands-on technical work, preferably in organizations undergoing significant digital transformations, such as the implementation of new trading systems, data warehouses, SaaS-based ERP and collaboration platforms, multiple web applications, etc.
Technical Expertise: Deep understanding of and e