Senior Information Security Manager
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Information Security Manager securing Backstory’s AI answers platform for sales teams. Owning preventative controls, compliance, risk reduction, and security tooling.
Responsibilities:
- Own and mature preventative security capabilities across cloud, SaaS, endpoint, identity, network, and data environments
- Translate broad security objectives into concrete technical requirements, controls, tooling, and implementation plans
- Evaluate, select, configure, and deploy security platforms and tooling across DLP, insider threat, endpoint security, IAM, vulnerability management, access controls, and security monitoring
- Continuously assess security posture, identify gaps and vulnerabilities, prioritize risk, and drive remediation through completion
- Partner with IT, Engineering, DevOps, and Product to integrate security controls into technologies, infrastructure, and business initiatives
- Build metrics and reporting on security control effectiveness and overall security posture
- Partner with Security Operations on visibility and protection for threat investigation and response
- Develop, maintain, and test incident response playbooks, business continuity processes, and disaster recovery plans
- Partner with CISO, CIO, and CTO on security compliance initiatives and work directly with auditors
- Translate SOC 2, ISO 27001, ISO 42001, GDPR, CCPA/CPRA, and EU AI Act requirements into practical technical controls
- Provide technical direction and mentorship to security engineers, analysts, IT partners, and external contractors
- Serve as a trusted security advisor across technical and non-technical stakeholders
- Own ambiguous security challenges from strategy and evaluation through implementation, measurement, and continuous improvement
Requirements:
- 7+ years of progressive experience in information security, with meaningful hands-on experience implementing enterprise security controls
- 2+ years of technical leadership, team lead, or people management experience
- Deep understanding of cloud, SaaS, endpoint, identity, network, and data security, including traditional and Agentic AI environments and workloads
- Strong hands-on experience implementing security tooling and controls rather than solely defining policy or overseeing implementation
- Experience with DLP, IAM, endpoint security, vulnerability management, insider threat, access management, and security monitoring
- Strong understanding of modern cloud infrastructure, security architecture, and risk management
- Experience operating in a modern Mac, Linux, cloud, SaaS, and open-source-heavy environment
- Experience automating security controls and workflows through scripting (e.g., Python) and infrastructure as code security (e.g., Terraform, policy as code, CI/CD pipeline guardrails)
- Working knowledge of NIST, CIS, ISO 27001, SOC 2, and Zero Trust
- Experience participating in security audits, working directly with auditors, gathering technical evidence, and remediating findings
- Deep knowledge of securing third-party API and OAuth integrations; scoping, token lifecycle management, and revocation across SaaS and data platforms
- Ability to translate complex technical threats and vulnerabilities into actionable solutions with Engineering, Product, IT, and non-technical stakeholders
- Strong analytical and problem-solving skills with the ability to independently evaluate security challenges and determine the right technical approach
- Experience working within U.S.-based technology environments and familiarity with enterprise security expectations
- Comfortable operating autonomously in a fast-moving environment where priorities and requirements will continue to evolve
Benefits:
- Regular employees may be eligible for commissions or bonus programs (target included in OTE)
- Equity
- Benefits
Similar Jobs
Senior Product Security Engineer
Senior Product Security Engineer securing AlphaSense’s AI-native market intelligence platform. Leading AI/ML security, threat modeling, secure architecture, and customer-facing assurance.
Senior Product Security Engineer
Senior Product Security Engineer securing AlphaSense’s AI-native market intelligence platform. Leading AI/ML security, threat modeling, secure architecture, and customer assurance.
Senior Information Systems Security Officer
Senior ISSO leading RMF accreditation and cybersecurity compliance for AnaVation’s federal digital evidence platform. Preparing ATT/ATO packages and managing NIST controls, assessments, and continuous monitoring.
Senior Cloud Security Engineer – AI Resilience, Security Enhancements
Senior Cloud Security Engineer strengthening cloud security, resilience and AI governance. Form3 operates a cloud-native, multi-cloud payments platform.
Information Security Consultant – SOC IR L3
Information Security Consultant leading complex cyber incident investigations for Eurofins, an international life sciences and laboratory testing company. Strengthening SOC capabilities through forensics, remediation, and response coordination.
SAP Basis Consultant, Security Consultant
SAP Basis and Security Consultant managing administration, performance, authorizations, and compliance for enterprise SAP landscapes. Supporting upgrades, migrations, and cloud transformation projects.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer managing endpoint, SIEM, vulnerability, and cloud security for clients. Securing AI systems through authorization, monitoring, and adversarial testing.
Senior Product Security Engineer – AI, DevSecOps
Senior Product Security Engineer securing McKesson’s healthcare software and AI systems. Designing cloud, CI/CD, and DevSecOps controls for resilient products.
Director, Application Security
Zillow security director leading Application Security and Security Architecture for a major U.S. real estate platform. Driving secure software, cloud security, and executive risk strategy.
Security Engineer, IAM
Analista de Segurança IAM administrando identidades, permissões e controles Cloud/SaaS no Jusbrasil. Protegendo dados jurídicos e apoiando o crescimento seguro da plataforma.
Director, Physical Security Solutions
Director leading ANM’s physical security and low-voltage infrastructure solutions organization. Driving multi-state delivery operations, financial performance, client experience, and team development.
Enterprise Security Architect – Senior
Enterprise Security Architect securing DHS ICAM applications and services. Integrating controls, supporting ATO activities, remediating vulnerabilities, and managing POA&Ms for federal environments.
Insider Risk Security Engineer
Insider Risk Security Engineer strengthening Zscaler’s cloud security platform against insider threats. Leading detection engineering, investigations, and defensible playbooks across enterprise security operations.
Senior Electronic Security Engineer
Senior Electronic Security Engineer designing, integrating, and sustaining electronic security systems for Cambridge’s U.S. government defense and security missions. Fully remote with customer-site travel.
Staff Security Engineer
Staff Security Engineer securing cloud applications and AI/LLM systems at Robots & Pencils. Defining architecture, threat defenses, automation, and production security standards.
Senior Security Engineer
Senior Security Engineer leading architecture, authorization, and remediation for Latitude’s federal health supply-chain software. Fully remote within the United States.
Security Engineer
Security Engineer securing supply-chain and logistics software for a federal health customer. Designing controls, integrating pipeline security, and validating safe releases.
Administrative Support Assistant – Security Systems Industry
Remote administrative assistant supporting a security systems company with phone calls, inspection reports, scheduling, CRM setup, and social media support. Structured role working under office-manager direction.
Security Engineer
Security Engineer strengthening 11:11 Systems’ global SOC through SIEM, SOAR, and incident-response engineering. Supporting customer security operations, detection improvements, and escalations.
Security Engineer
Security Engineer strengthening 11:11 Systems' global SOC through SIEM, SOAR, and incident response. Supporting customer escalations, detection engineering, automation, and 24/7 security operations.