Senior IT Security Manager, Dandy

• Leadership Experience: 3+ years in a leadership role within IT security, with a proven track record of building programs and delivering outcomes in fast-paced, growth environments
• Proven Security Expertise: 7+ years of experience in IT security, with deep knowledge of incident response, cybersecurity tools (e.g., Splunk, CrowdStrike, Palo Alto Networks), and processes like threat detection, containment, and recovery
• Hands-On Technical Skills: Significant experience implementing and managing cybersecurity technologies (e.g., SIEM, EDR, MFA). Understanding of SAST/DAST and security principles across Windows, macOS, Linux, GCP, and Azure environments is a must
• Collaborative Leadership: Strong communicator capable of working with IT, Product, Engineering, and executive stakeholders to align security initiatives with business goals. Ability to simplify complex security issues for diverse audiences
• Strategic Thinking & Execution: You can define a long-term security vision while executing tactical initiatives, balancing hands-on work with strategic planning in a resource-constrained environment
• Process-Oriented & Detail-Oriented: Experience designing and implementing rigorous, scalable security processes (e.g., incident response workflows, tabletop exercise frameworks) that drive consistency and efficiency
• Technical Aptitude: Strong understanding of network security, cloud security, and system integrations. Ability to translate security requirements into technical specifications for internal or external resources

Desirable

• Dandy is seeking a dynamic and experienced Senior Manager, IT Security to establish, lead, and grow our IT security functions
• Reporting directly to the Director, IT, this role will own the strategy, execution, and continuous improvement of Dandy’s cybersecurity program
• You’ll be responsible for building our incident response capabilities, implementing best-in-class security technologies, conducting tabletop exercises, and partnering with our IT, Product, and Engineering teams to embed security into everything we build
• This is a high-impact role for a hands-on, strategic leader who thrives in a fast-paced environment and is passionate about building a security-first culture from the ground up
• Build & Shape the IT Security Function: Define the vision, structure, and roadmap for our IT security program. Establish policies, processes, and growth paths as the function scales
• Lead Security Incident Response: Own our Security Incident Response Policy and Process, leading real-time incident response for threats like malware, phishing, or data breaches. Establish clear RACI models and success metrics for containment and recovery
• Drive Tabletop Exercises: Design and facilitate tabletop exercises to prepare cross-functional teams (IT, Product, Engineering, Legal) for cyber threats, fostering corporate readiness and iterative improvements
• Implement Cybersecurity Technologies: Evaluate and deploy scalable cybersecurity tools (e.g., SIEM, EDR, MFA, firewalls) to protect our infrastructure. Stay ahead of emerging threats and recommend cost-effective solutions
• Partner with Application Security Teams: Collaborate with Product and Engineering to embed security into the software development lifecycle (e.g., DevSecOps, secure coding). Support vulnerability management and application security best practices
• Foster a Security-First Culture: Advocate for security awareness across the organization through training, policies, and cross-functional collaboration. Translate complex security concepts into actionable insights for non-technical stakeholders
• Optimize Processes & Metrics: Establish best practices for incident response, system security, and data protection. Define KPIs to measure program effectiveness and report progress to leadership