Mgr, Information Security

About Gen:

Gen is a global company powering Digital Freedom through consumer brands including Norton, Avast, LifeLock, Avira, AVG, ReputationDefender, and CCleaner. Our combined heritage is rooted in providing safety for the first digital generations. We bring leading technology solutions in cybersecurity, privacy and identity protection to more than 500 million users in 150 countries so they can live their digital lives safely, privately, and confidently today and for generations to come. We're always looking for smart, fearless, and dedicated people. Together, we have collective passion and a big vision to power Digital Freedom by protecting consumers and giving them control of their digital lives. 

If this sounds like you—Gen has a dynamic, supportive culture with core values that celebrate diversity, promote teamwork, and encourage every team member to contribute and grow—join us!

About The Role:

This is a flexible hybrid role, the person must be in commutable distance to Tempe office (3 days at least in office weekly)

As a manager of the Security Engineering organization at Gen, you will be working with a talented group of analysts working towards raising the bar on security. We work cross-functionally and collaborate with multiple partner teams to guide security best practices.

About The Team:

We are seeking a skilled and experienced Manager to lead this dynamic security team. In this role, you are responsible for the support of security tooling infrastructure, as well as overseeing and executing comprehensive security assessments, identifying vulnerabilities, recommending remediation strategies, and ensuring robust firewall configurations. This role requires a strategic thinker with strong leadership capabilities to ensure the organization's information assets are adequately protected.

This team is instrumental in securing and protecting our systems. You will collaborate with diverse teams, including IT, legal, compliance, and engineering to develop and execute security strategies. You will lead a dynamic team in devising and implementing innovative security strategies, utilizing advanced technologies and frameworks to defend our digital assets against evolving cyber threats.

Key Responsibilities:

• Foster a culture of innovation, collaboration, and continuous learning
• Responsible for performance management for the team including identifying team performance gaps and development areas
• Define a long-term vision for aligned with business goals, risk tolerance, and industry trends encompassing security assessments, network security, cloud security, and data protection
• Provide strategic guidance to address current and emerging threats effectively and collaborate with other departments to implement effective risk mitigation strategies and review compliance with relevant regulations and standards.
• Collaborate with the security architecture & security engineering teams in implementing and maintaining cybersecurity solutions across various digital technologies
• Conduct regular reviews and audits of firewall rules, ensuring adherence to security policies and industry best practices
• Work closely with stakeholders to address any compliance issues and implement corrective measures
• Secure cloud environments (IaaS, PaaS, and SaaS) by integrating security measures into cloud architecture and services, following best practices and compliance standards
• Assist Product teams in understanding and implementing security policy objectives in ways that are cost-effective, and align with business objectives
• Stay current on security industry trends, attack techniques, mitigation techniques, and security technologies by attending conferences, networking with peers, and other educational opportunities

Qualifications:

• A collaborative, people-first leader with experience building and maintaining healthy teams
• Experience in a management or supervisory position in information security
• Familiar with PCI, Sarbanes Oxley (SOX), NIST cybersecurity framework, ISO 27000 security standards, privacy and data protection regulations and requirements
• 3-5 years’ experience in a relevant role
• Bachelor's or Master's degree in Information Security, Cybersecurity, related field, or equivalent experience
• Proven experience in managing security assessment programs in complex environments
• Expertise in firewall security, with knowledge of industry best practices
• Industry certifications such as CISSP, CISM, or equivalent are highly desirable
• In-depth knowledge of security frameworks, compliance standards, and best practices
• Strong analytical and problem-solving skills, wit