Manager, Information Security
Core
Manage information security compliance and automate security controls for a Penetration Testing as a Service platform serving Global 2000 customers and US agencies.
Role type
Senior IC Information Security Compliance Manager
Builds
Automated security evidence collection, control-drift monitoring, and compliance reporting aligned with FedRAMP, CMMC, and ISO standards.
Domain
Cybersecurity compliance, Cloud Security, AI Governance
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
ISO 27001/42001, SOC2, CMMC, FedRAMP, NIST AI RMF, GRC frameworks, Cloud Security, DevSecOps, Risk Management, Security Automation, AI/Agentic System Governance
Preferred skills
Python, Terraform, CI/CD integration, SOAR platforms, CNAPP, SIEM query languages, Secrets Management, Non-human identity scoping
Technologies
Python, Terraform, Datadog, Stackdriver, Azure Sentinel, SOAR, CNAPP, CI/CD pipelines
Responsibilities
Automate generation of System Security Plans (SSP) and conduct Security Impact Analysis (SIA); Develop and maintain automated Plans of Action and Milestones (POAMs); Own inventory and risk assessments of AI/agentic systems; Codify security controls into IaC guardrails and CI/CD checks; Coordinate vendor security assessments and 3rd party risk assessments.
Seniority
Senior, hands-on IC
