Information Security Manager

We are seeking an experienced Cybersecurity Manager to lead and mature enterprise security programs across governance, cyber risk management, compliance, cloud security, AI security governance, and certification initiatives.

This role will be responsible for cyber risk management, IT audits, vulnerability governance, certification ownership, and enterprise security programs across key standards including SOC 2 Type II, ISO 27001, PCI-DSS, and HIPAA.

The role will also lead AI risk management and Responsible AI initiatives to ensure secure adoption of emerging technologies.

• Define and execute enterprise cybersecurity strategy aligned to business objectives and regulatory requirements
• Establish security policies, standards, and governance frameworks
• Drive adoption of security frameworks including NIST CSF, ISO 27001, and CIS Controls
• Govern security operations from risk and governance perspective
• Review security incidents, operational risks, trends, and management reporting
• Support incident readiness and post-incident governance activities

• Lead enterprise cyber risk management programs including risk identification, assessment, treatment, and reporting
• Maintain risk registers and executive reporting
• Integrate cyber risks across cloud, applications, AI systems, infrastructure, and third parties

Own enterprise certification and audit programs including: