Senior Manager, Information Security

What you'll be doing:

• Strategic Leadership: Collaborate closely with the Director of Risk and Compliance to define and oversee the execution of the company's information security strategy, ensuring alignment with business goals and compliance standards.
• Program Management: Coordinate and manage various security initiatives, from risk assessments to security tool implementations, ensuring timely completion and effectiveness.
• Incident Response: Lead the incident response process, ensuring that security breaches or vulnerabilities are addressed promptly and effectively.
• Cloud Security Oversight: Ensure that all cloud-based applications, infrastructure, and data (hosted primarily in GCP with some assets in AWS) are secure and compliant with industry standards.
• Collaboration: Work closely with technical teams, especially those in Infrastructure and Data, to ensure security best practices are integrated throughout the organization. Facilitate efficient interactions with other teams as necessary, especially given the company's global presence.
• Continuous Improvement: Stay updated on the latest security threats, trends, and technologies to ensure the company's security measures are up-to-date and effective.

What you need to have:

• Minimum of 8 years of related experience with a Bachelor's degree; or 6 years and a Master's degree; or equivalent experience.
• Experience working in companies with security certifications such as ISO 27001 or SOC 2
• Familiarity with cloud platforms, especially Google Cloud Platform (GCP) and Amazon Web Services (AWS).
• Familiarity with Kubernetes and Infrastructure-as-Code practices.
• Understanding of compliance requirements, especially HIPAA and GDPR.
• Excellent communication and collaboration skills.
• Strong problem-solving and analytical skills.
• Proven ability to work in a fast-paced environment and manage multiple projects simultaneously.
• Strong attention to detail and ability to deliver high-quality work.

Bonus Points or We'd Love to see:

• Preferred certifications include CISSP, CISM, PMP, and other relevant security or project management certifications.
• Experience working with Security tools such as Snyk, Wiz, SentinelOne, Croudstrike, Expel, Sophos MDR, Qualys, Nessus (including open-source alternatives)
• Experience working in companies with security certifications such as PCI-DSS, HITRUST, or FedRamp