Sr. Manager of Information Security

Position Overview:

The Senior Manager of Information Security leads enterprise-wide security strategy, risk management, and data protection efforts. This role is responsible for developing and enforcing policies, managing cybersecurity operations, and aligning security initiatives with business goals. They serve as the primary escalation point for incidents and partner with IT, Legal, Finance, and executive leadership to ensure compliance and resilience across the organization.

Compensation: $125K-$142K + benefits & bonus

Key Responsibilities:

• Design and implement company-wide security strategies, frameworks, and policies
• Lead incident response, vulnerability management, and threat intelligence efforts
• Manage security operations and technology across cloud, on-prem, and hybrid environments
• Ensure compliance with security and regulatory frameworks (NIST, ISO, PCI, SOC 2, GDPR, SOX)
• Partner with Finance, Internal Audit, and external auditors to support SOX and PCI compliance, including audit preparation and remediation efforts
• Oversee third-party risk management and vendor security reviews
• Present security risks, controls, and KPIs to executives and key stakeholders
• Lead company-wide security awareness and training programs