Information Security Manager

Own the administration and continued development of the Aries security compliance program within Vanta .

Maintain control mappings, evidence, integrations, tests, ownership, and remediation workflows.

Ensure compliance tooling reflects the actual security posture of the organization rather than functioning solely as an audit checklist.

Identify control gaps and work with relevant teams to address them.

Serve as the primary operational counterpart to Aries’ vCISO.

Translate security strategy and recommendations into concrete initiatives, owners, and deliverables.

Provide the vCISO and executive leadership with clear visibility into security risks, priorities, incidents, and program maturity.

Help develop the longer-term security roadmap as Aries continues to grow.

Several years of progressive experience in information security, cybersecurity governance, security operations, GRC, or related disciplines.

Previous experience owning or materially contributing to an organizational information security program.

Experience leading security professionals, projects, or cross-functional security initiatives.

Strong understanding of security governance, risk management, incident response, and control frameworks.

Experience working with security compliance platforms such as Vanta, Drata, Secureframe , or similar tools.

Experience supporting security audits, assessments, compliance programs, or regulatory examinations.

Ability to develop clear policies, procedures, reports, metrics, and executive-level security communications.

Strong organizational skills and the ability to drive remediation work across teams that you may not directly manage.

Comfortable operating in a growing organization where processes are still being built and improved.

Strong judgment and the ability to distinguish meaningful security risk from compliance-box-checking.

Experience with SOC 2, NIST CSF, CIS Controls, ISO 27001, or similar frameworks.

Experience within a broker-dealer, fintech, financial institution, trading firm, or similarly regulated financial-services environment .

Familiarity with FINRA and/or SEC cybersecurity expectations .

Experience working with a vCISO or outsourced security advisory function.

Experience participating in or coordinating tabletop exercises and incident response simulations.

Security certifications such as CISSP, CISM, CRISC, GIAC, or similar credentials.

Certifications are valued, but practical experience building and operating security programs is more important to us than collecting acronyms.

This role is intended to become an important part of Aries’ leadership structure. As the company and security function grow, the successful candidate will have the opportunity to expand their scope, build out the security organization, and potentially progress into a Director of Information Security role and beyond.

Aries is a financial technology company building modern infrastructure and products for active investors and traders.

We operate in an environment where security, reliability, regulatory compliance, and customer trust are fundamental to the business. As Aries continues to scale, we are investing in a security program that is practical, accountable, and deeply integrated into how the company operates.

We’re looking for someone who wants to help build that program — not simply inherit a checklist.