The Manager, Information Security is responsible for leading the organization's information security compliance program, governance initiatives, and audit activities. This role develops and maintains security policies, ensures compliance with regulatory and industry standards, manages security metrics, and provides strategic guidance on information security risks and best practices. The position also leads security projects and manages a team to support the organization's security objectives.

Responsibilities

• Lead information security compliance initiatives and identify opportunities to improve security processes.
• Plan, manage, and support internal and external compliance audits, ensuring timely delivery of required documentation.
• Develop, implement, and maintain information security policies, standards, procedures, and governance programs.
• Ensure compliance with regulatory and industry frameworks, including PCI DSS, SOX, and SOC2.
• Partner with cross-functional teams to drive security initiatives and continuous improvement.
• Provide security guidance and consultation to business stakeholders on information security matters.
• Develop and maintain information security metrics, reporting, and program documentation.
• Lead project planning, resource allocation, and security program execution.
• Research emerging security technologies and industry best practices to enhance security capabilities.
• Manage, mentor, and develop team members, including recruiting, coaching, performance management, and career development.
• Perform additional duties as assigned.

Qualifications

Education

Bachelor's degree in Management Information Systems, Computer Science, or a related field (or an equivalent combination of education and experience).
Professional certifications related to PCI DSS, SOC2, or SOX are preferred.

Experience

8–12 years of experience in Information Security management, governance, or security assessment roles.
Experience managing PCI compliance controls and security audit programs.
Strong understanding of risk assessment methodologies and security frameworks, including PCI DSS, SOX, and SOC2.
Demonstrated project management and team leadership experience.
Experience developing security policies, procedures, and documentation.
Excellent written and verbal communication skills, including report writing and business documentation.

Technical Skills

Advanced knowledge of Microsoft Office applications and operating systems.
Experience leading technical audits and compliance assessments across multiple departments.
Hands-on experience with Governance, Risk, and Compliance (GRC) platforms or other audit management tools

Keys to Success

• Building collaborative relationships
• Decision making
• Drive results
• Foster innovation
• Personal energy
• Self-leadership

#LI-AM1

#LI-HYBRID