Senior Manager of Information Security, Canoe

• A successful candidate will have a strong background in cloud security, compliance frameworks, and IT operations, with specific experience in managing AWS environments, SaaS products, and endpoint management tools
• 8+ years of experience in Information Security, IT Management, or Compliance
• Strong understanding of AWS security best practices and cloud SaaS security
• Experience with endpoint management tools such as CrowdStrike, JAMF, and Kaseya
• Hands-on experience with cloud security posture management tools like Wiz.io
• Proficiency with SIEM tools such as SumoLogic for log analysis and threat detection
• Knowledge of compliance frameworks and regulations (e.g., SOC 2, GDPR)
• Experience in conducting security risk assessments and vulnerability assessments
• Strong incident response and management skills
• Excellent communication, leadership, and project management skills
• Ability to work in a fast-paced and dynamic environment

Desirable

• As the Senior Manager, Information Security, you will be responsible for overseeing Canoe Intelligence's Information Security, Compliance, and IT functions
• You will lead a team and work closely with other departments to ensure the confidentiality, integrity, and availability of our systems and data
• Develop and implement information security policies, standards, and procedures
• Work closely with the DevOps team to improve and maintain the security of our AWS infrastructure and cloud SaaS products
• Oversee IT operations, including endpoint management using CrowdStrike, JAMF, and Kaseya
• Utilize Wiz.io for cloud security posture management and vulnerability scanning
• Leverage SumoLogic for security information and event management (SIEM) and log analysis
• Take ownership of the Due Diligence Questionnaire process, ensuring timely and accurate responses
• Serve as a client-facing security expert during the sales process to articulate and defend Canoe's security posture
• Ensure compliance with relevant industry regulations and standards (e.g., SOC 2, GDPR)
• Conduct security risk assessments and vulnerability assessments
• Respond to security incidents and lead incident response efforts
• Manage and mentor IT and security staff
• Collaborate with engineering and product teams to integrate security into the development lifecycle
• Maintain and improve security awareness training programs