Sr. Manager, Security — Continuous Monitoring v 2.0

Role overview

This senior management position leads an engineering function dedicated to continuously verifying whether an organization's security controls are operating as intended across cloud infrastructure, identity systems, SaaS platforms, and enterprise applications. The role combines hands-on engineering leadership with strategic ownership of a monitoring platform that converts compliance requirements into measurable, automated signals. Success is measured by control coverage, the accuracy and timeliness of posture reporting, and how quickly detected gaps reach the teams who can resolve them.

Responsibilities

- Build, grow, and mentor a team of security software engineers who blend GRC domain knowledge with production engineering skill, including developing senior individual contributors and future managers - Define the strategy, roadmap, and priorities for a continuous control monitoring platform spanning cloud, identity, SaaS, and enterprise systems, including secret scanning, SAST, and asset vulnerability tooling - Review Python code, data pipelines, and integrations against cloud and SaaS APIs to uphold code quality, reliability, observability, and documentation standards across audit cycles - Translate frameworks such as SOC 2, ISO 27001, FedRAMP, and PCI DSS into automated control assessments, evidence collection, and remediation tracking - Build durable partnerships across GRC, IT, legal, risk management, and engineering teams that own the monitored controls - Make the case for the headcount, tooling, and investments required to mature the monitoring program as scope expands

Requirements

- Proven engineering management experience leading teams that ship production software, ideally in security engineering, GRC automation, or a closely related domain - Technical depth sufficient to review Python, data pipelines, and cloud or SaaS API integrations credibly - Familiarity with major security and compliance frameworks including SOC 2, ISO 27001, FedRAMP, and PCI DSS - Demonstrated judgement to prioritize the controls where continuous measurement most effectively reduces real risk - Track record of hiring strong engineers, giving clear career feedback, and upholding a high engineering quality bar - Ability to operate at the intersection of security engineering and governance, risk, and compliance functions

Benefits and work setup

- Compensation package may include base salary, annual performance bonus, and equity participation, with actual figures varying by skills, experience, certifications, and work location - Comprehensive benefits and perks program, with specific offerings dependent on region and local eligibility - Role may involve access to export-controlled technology, in which case eligibility for any required government license is determined at the employer's discretion