Information Security Manager, Atom Computing

• Bachelor’s in Computer Science, Information Technology, or a related field
• 6+ years of information security experience, with at least 2 years in a role involving ownership of a security program or function
• Experience building and maturing security programs—including policies, frameworks, and compliance initiatives—in startup or rapidly scaling organizations
• Deep hands-on Okta experience including lifecycle management, conditional access, and MFA enforcement
• Solid technical foundation across endpoint security, cloud/physical IAM, and SIEM
• Comfort with the dual nature of this role: hands-on execution and strategic program ownership

Desirable

• We are seeking an Information Security Manager to be the operational backbone of our IT team, located in our Boulder, Colorado office and offering support to all our offices nationally. In this role, you will manage our information security program end-to-end: setting policy, driving compliance, managing risk, and operating the technical controls that will further improve our security posture
• Develop, publish, and maintain a comprehensive information security policy framework, assessing risk across people, processes, and technology and recommending appropriate mitigation strategies
• Define and track key security metrics to demonstrate program maturity and communicate risk posture clearly to the Atom team
• Mature our IAM Environments, assist in deploying conditional access policies across the environment, credential management, and zero-trust
• Conduct and document regular access reviews, enforcing least-privilege principles across the organization’s SaaS and cloud footprint
• Partner with the IT team on MDM deployment to enforce baseline security policies across macOS, Windows, and Ubuntu systems
• Collaborate with DevOps to harden cloud infrastructure, review IAM configurations, and embed security guardrails within CI/CD pipelines
• Continuously update our SIEM solution to centralize log collection and enable detection across endpoints, cloud, and SaaS
• Lead an end-to-end compliance effort: This may include SOC 2 Type II, ISO 27001, and NIST 800-53 / 171
• Assess and manage third-party and vendor security risk, including quantum cloud provider relationships and research partnerships
• Run and Maintain our KnowBe4 security awareness program; for a highly technical workforce