Information Security Manager

Our client, a multi-business organization, is looking for a hands on Information Security Manager to take charge of the security program across several independently run business units. You'll set the direction for risk and governance, lead the response when incidents hit, and keep the security tools running day to day, all while coaching a team of engineers and holding outside security vendors accountable. Success here comes down to influence: you'll spend as much time working with business unit leaders as you do with your own team, turning technical risk into decisions the business can act on.

C2C is not an option with this job opening and all applicants should be able work for any US Employer without sponsorship. Sponsorship is not provided and this person will not need to require sponsorship in the future.

• Lead and grow a capable team of cybersecurity engineers
• Work across multiple businesses instead of being locked into one environment
• Blend of strategy and hands on security work

Compensation: $130K-$180K, based on experience

What You'll Be Doing

• Own the security program end to end, including governance, risk reviews, and vendor risk
• Take the lead on incident response and oversee daily operation of the security toolset
• Supervise internal security staff and manage outsourced security providers
• Drive security projects to completion while building stronger project management habits on the team
• Mentor engineers and help them grow in targeted technical areas
• Work side by side with business unit leaders to move security initiatives forward
• Explain technical risk in plain business terms to non-technical executives

What You'll Need to be Considered

• Bachelor's degree in cybersecurity, information systems, computer science, or a related field (or equivalent experience paired with a relevant certification)
• 5+ years in IT, including 3+ in a dedicated security role and 2+ leading or supervising a team
• Hands on experience with risk assessment, incident management, and running projects
• Working knowledge of a recognized security framework (NIST, CMMC, CIS, or ISO 27001), including mapping controls and gathering evidence
• Practical experience with SIEM, EDR, vulnerability management, firewalls, email security, identity and access management, and backup/recovery
• Experience securing a Microsoft environment (Active Directory/Entra ID, Microsoft 365, Defender, Intune)
• Track record of managing and developing technical security staff
• Comfortable building relationships and influencing across a decentralized, multi business structure
• CISSP, CISM, CRISC, GIAC, or Microsoft security certifications (preferred)
• Exposure to OT/industrial security or security vendor management (preferred)