Information Security Manager, Beyond Finance

• 7+ years of InfoSec experience with a background in Data Protection, SaaS Security, or Endpoint Security in a mixed-OS environment
• 3+ years of formal people management experience in a security context
• Strong project management skills, with the ability to define business value, manage timelines, and ensure projects align with strategic goals
• Deep expertise in the technologies and strategies used to protect corporate data and prevent unauthorized transfer
• Proven ability to translate security requirements into an actionable engineering roadmap
• Exceptional communication skills, with experience presenting sensitive topics to leadership
• A relentless drive to see complex initiatives and investigations through to completion

Desirable

• As the Information Security Manager, you will lead our Information Security team focused on Endpoint Security, IAM and Insider Risk
• This is a critical people management role focused on protecting the company's sensitive data and mitigating internal risks
• You will manage a multi-tiered team of security professionals responsible for securing our corporate data across a diverse environment
• Your primary objective is to drive the team's mission to protect company assets, develop and enforce security controls, and translate security priorities into an actionable roadmap
• Team Leadership: You'll lead, mentor, and develop a team of security engineers and analysts, managing their performance and career growth while fostering a culture of high performance and ownership
• Project Management & Execution: Define, manage, and execute security projects from conception to completion
• Clearly articulate the business value of initiatives and ensure projects remain aligned with strategic goals and are delivered on time
• Data Protection Program Management: Manage the company's data protection program, including monitoring for and investigating potential security policy violations
• Oversee the incident response process for internal security events, reporting to HR, Legal, and department heads as needed
• Security Control & Policy Deployment: Develop and implement strategies to protect sensitive company data
• Drive the deployment of new preventative controls and security policies across our endpoints, SaaS applications, and communication platforms to reduce risk
• Stakeholder Communication: Serve as the primary point of contact for internal data security matters, frequently briefing business leaders on incidents, new controls, and the company's security posture
• Driving Results: Proactively drive security initiatives and incident remediation to completion by removing roadblocks and instilling a sense of urgency