Information Security Manager, Synack
$150-180k
More information about location
Security testing platform
Be an early applicant
Security testing platform
201-500 employees
Be an early applicant
$150-180k
More information about location
201-500 employees
Company mission
To create technology that unleashes the best cybersecurity talent to secure our digital world.
Role
Who you are
- 8+ years of experience IT Security Strategy, Risk Management, IT Audit and Compliance with a Cloud Service Provider
- Experience with Python, Terraform, and CI/CD pipelines, plus comfort integrating tools with AI
- Experience with Enterprise Governance, Risk Management, and Compliance (GRC) tools
- Experience with event monitoring and alerting tools such as Datadog, Stackdriver, and Azure Sentinel
- Experience with SOAR or auto-remediation platforms and detection engineering / SIEM query languages
- Experience with Cloud Native Application Protection Platforms (CNAPP)
- Experience with leveraging security tools within the Software Development Lifecycle (SDLC)
- Familiarity with secrets management and workload identity (non-human)
- Working knowledge of security regulations, standards, and frameworks, including but not limited to ISO27000, ISO42001, OWASP, SOC2, GDPR, CMMC, FedRAMP, and NIST
- Excellent written and verbal communication skills with the ability to accurately communicate security and risk-related information to technical and non-technical audiences
What the job involves
- We are looking for a talented Information Security Compliance Manager with deep expertise in ISO, SOC, CMMC and FedRAMP compliance
- You will work closely with the Product, Engineering, and Operations teams to ensure proper security controls and monitoring are applied
- Automate generation of System Security Plans (SSP), including Security Concept of Operations, Risk Management Matrix, Security Control Traceability Matrix, and conduct Security Impact Analysis (SIA) on major system changes
- Develop and maintain automated Plans of Action and Milestones (POAMs)
- Contribute to the adoption and implementation of automation and use of Artificial Intelligence (AI) within Synack's Information Security operations
- Own the inventory and risk assessments of AI/agentic systems used across Synack, aligned to NIST AI RMF and ISO 42001, including data handling, model and agent change control, non-human identity and credential scoping
- Build and own automated evidence collection and control-drift around security controls
- Communicate regularly with stakeholders on security compliance issues aligning to CIS and NIST standards, track mitigation/remediation tasks, and assisting in generation of reports and metrics
- Codify security controls into IaC guardrails, CNAPP policies, and CI/CD checks to prevent risks at commit and deploy time
- Working with Project Managers and Software Engineers in a collaborative and enabling (non-obstructive) manner; Ensuring appropriate information security policies, standards, procedures, and guidelines are being incorporated across Synack hosted services and infrastructure, with a focus on hardening and adhering to DevSecOps principles
- Coordinate with the field teams to respond to vendor security assessments and conduct 3rd party risk assessments of Synack vendors
Our take
As the cyberthreat landscape continues to get more complex, there is a need for sophisticated solutions. Fuelled by expertise in countering kinetic and cyber threats, Synak was founded to deliver on-demand security testing to meet this need.
Synack fosters an ecosystem where world-class security researchers collaborate to provide continuous penetration testing and vulnerability management. This allows the company not only to supply actionable results but also to cultivate a community-based approach to knowledge sharing.
In 2022, Synack was integrated into Microsoft Intelligence. This allowed it to bolster its innovation through collaboration with Microsoft's vast resources and expertise. As a result, Synack has fortified its position at the forefront of cutting-edge security solutions, and continues to launch new capabilities to address the evolving challenges of cybersecurity.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-23% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
May 2020
$52m
SERIES D
Apr 2017
$21.3m
SERIES C
Total funding: $107.3m
Company benefits
- Ample Holidays and Time Off: Depending on where you are in the world, we offer the best and most accommodating time off policies, bar none. We believe in working hard to play hard
- Paid Parental Leave: Proud parent-to-be? We are thrilled for you and recognize this is a time you don't want to miss. Synack provides team members with a generous paid parental leave policy
- 100% Covered Health Plan Benefit: Our people are our greatest asset, and that's why we invest in high-quality healthcare coverage for our employees with comprehensive medical, dental and vision benefits in the U.S.
Company HQ
Redwood Shores, Redwood City, CA
Leadership
Jay Kaplan
(Co-Founder & CEO)Graduated from the George Washington University with an MS in Engineering Management. Previously worked as a Computer Scientist at the Defense Information Systems Agency and as a Senior CNO Analyst at the National Security Agency.
Mark K.
(Co-Founder & CTO)Graduated from Auburn University with a Ph.D. in Computer Science. Previously worked as an Advisor at CloudKnox Security and as a CNE Analyst at Novetta.
Share this job
View 2 more jobs at Synack