Manager, Information Security

Role overview Lead an information security function and keep its programs aligned with business needs while ensuring the day-to-day work is tracked through to completion. You’ll coordinate incident response, risk reviews, vulnerability remediation, policy governance, and compliance readiness, while advising technical teams and business leaders on practical security decisions.

Responsibilities - Set priorities, owners, timelines, and follow-through for security programs; maintain a roadmap informed by risks, audits, customer needs, and business priorities. - Manage vulnerability, incident response, risk assessment, policy, compliance readiness, and security review activities. - Coordinate incident triage, investigation, mitigation, stakeholder updates, documentation, and follow-up. - Track findings from penetration tests, audits, customer reviews, and assessments, assigning remediation owners and escalating blockers. - Translate technical findings into clear risk assessments and action plans for technical and non-technical audiences. - Advise Product, Engineering, IT, Legal, customer-facing teams, and senior leadership; develop team members and improve processes and tooling.

Requirements - Experience leading information security programs and managing work across areas such as vulnerability response, incidents, risk, policies, reviews, and compliance. - Ability to assess technical findings, make risk-based recommendations, and communicate them clearly to varied stakeholders. - Experience coordinating across technical and business teams, including Legal, IT, Product, Engineering, auditors, and leadership. - Strong organization and autonomy: able to manage competing priorities, keep stakeholders updated, escalate issues, and close work without close day-to-day direction. - The available source does not include the complete requirements list, so additional qualifications cannot be confirmed.

Nice to have - Security automation, workflow improvement, or tooling experience. - CISSP, CISM, CCSP, GIAC, or AWS Security Specialty certification. - Experience supporting distributed or remote-first teams.

Benefits and work setup - Virtual-first environment spanning eight countries; applicants must have unrestricted U.S. work authorization and live in an eligible state. - Flexible time off and leave programs, quarterly wellness reimbursement, medical, dental, and vision plans, and employer retirement match. - Six or more weeks of paid parental leave and access to learning resources. - The role supports SOC 2 Type II compliance readiness.