- Full-time direct hire position.
- Hybrid-mostly remote, with monthly travel to office when needed.
Job Summary
We are seeking a highly skilled and proactive IT Information Security Manager to oversee and advance our organization’s cybersecurity posture within a hybrid work environment.
This pivotal role involves developing, implementing, and maintaining comprehensive security strategies aligned with industry standards and regulatory requirements.
The successful candidate will lead security initiatives, manage risk assessments, and ensure the integrity, confidentiality, and availability of our IT infrastructure and data assets.
This position offers an exciting opportunity to shape our security framework while collaborating across teams to foster a culture of security awareness and compliance.
Duties
Lead IT operations and information security functions — infrastructure, cloud, cybersecurity, staffing, vendors, budgets, projects, and policy — and report regularly to executive leadership on risk, operations, and AWS migration progress.
- Manage IT staffing (recruiting, supervision, scheduling, development, evaluation, and performance/disciplinary actions) and build a focused, high-performing technical team.
- Own IT financial management, including budgeting, purchasing, vendor and contract negotiation, licensing/renewals, and AWS/cloud spend.
- Partner with the Help Desk on end-user issues and coordinate communication of infrastructure and security changes.
- Own technical delivery of the company’s continued migration of infrastructure, applications, and services to AWS, including evaluating workloads for migration, modernization, re-platforming, or retirement.
- Design, operate, and govern secure, scalable AWS environments — account structure, networking, compute/storage/database services, logging, monitoring, backup, and cost optimization (full stack detailed under Technical Environment).
- Maintain enterprise infrastructure spanning AWS, Microsoft 365/Entra ID, networking, firewalls, telecom, datacenter/colocation, and remaining on premises/VMware environments during the cloud transition.
- Oversee production availability, backup, disaster recovery, patching, capacity planning, and change management, with appropriate documentation.
- Own the company’s cybersecurity architecture and posture across AWS, infrastructure, endpoints, applications, and users, including IAM/least-privilege design and AWS-native security tooling (see Technical Environment).
- Lead security operations — SIEM/SOC monitoring (Splunk Enterprise Security), detection, alerting, endpoint security (EDR/XDR), vulnerability management, and email/web security and awareness training — and serve as primary escalation point for incident response.
- Maintain the company’s NIST CSF-aligned cybersecurity governance program, including audits, assessments, cybersecurity insurance requirements, and customer/vendor security questionnaires.
- Partner with Software Engineering to build security into the SDLC — penetration testing, SAST/DAST, dependency and IaC scanning, and CI/CD security controls — including for cloud-native AWS applications.
- Maintain security policies, standards, and procedures, and track risks and remediation for leadership visibility.
Technical Environment
AWS / Cloud: AWS Organizations, IAM, VPC, EC2, S3, RDS, ELB/ALB, Route 53, CloudWatch, CloudTrail, GuardDuty, Security Hub, Inspector, Config, IAM Access Analyzer, KMS, WAF/Shield, Secrets Manager, AWS Backup, disaster recovery, and Infrastructure as Code.
AWS Security: Cloud security architecture, IAM/least privilege, workload security, encryption, key management, centralized logging, network segmentation, vulnerability management, incident response, cloud governance, and secure Infrastructure as Code.
Security Operations: Splunk Enterprise Security, SIEM, EDR/XDR, Cisco Secure Endpoint, Cisco Umbrella, vulnerability-management platforms, WAF, IDS/IPS, incident response, threat detection, and security monitoring.
Microsoft / Identity: Microsoft 365, Entra ID, Exchange Online, SSO, MFA, Conditional Access, identity lifecycle management, Active Directory, DNS, group policies, and DLP.
Infrastructure: VMware vSphere, VDI, Windows Server, enterprise networking, Cisco firewalls/switches/routers, storage, datacenter/colocation infrastructure, telecommunications, monitoring, backup, and disaster recovery.
Application Security / DevSecOps: Penetration testing, SAST/DAST, vulnerability remediation, Veracode or equivalent tooling, CI/CD security, Infrastructure as Code, and secure SDLC practices.
Required Qualifications
- 10+ years of progressive experience across IT infrastructure, cloud operations, and cybersecurity, including 5+ years leading technical teams or technology functions.
- Strong hands-on experience architecting, operating, troubleshooting, governing, and securing production AWS environments — including IAM, networking, logging/monitoring, and native AWS security services — plus experience leading or substantially contributing to migrations to AWS.
- Experience managing both enterprise IT operations and cybersecurity/security operations responsibilities, including building or operating SIEM/SOC and incident-response capabilities.
- Strong hands-on knowledge of Microsoft technologies (Microsoft 365, Entra ID, Windows Server, Active Directory, DNS, Exchange, group policies) and enterprise networking (Cisco IOS, router/switch configuration, SNMP, TCP/IP, WAN/LAN, firewalls, remote access).
- Strong understanding of vulnerability management, endpoint/network/identity/application/cloud security, and cybersecurity frameworks such as NIST CSF, including supporting security audits and assessments.
- Experience managing highly available production infrastructure, backup, and disaster-recovery environments.
- Strong analytical, oral communication, interpersonal, and technical/business writing skills, with the ability to translate complex technical and cybersecurity risk for executive and business leadership.
- Strong project-management, vendor-management, budget-management, and people-management skills; able to work independently, prioritize, and manage multiple initiatives amid changing business demands.
Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or a related field; advanced certifications such as CISSP, CISM or CISA are highly desirable.
- Extensive experience managing information security programs within complex IT environments involving computer networking (LAN/WAN), routing protocols (OSPF/EIGRP/BGP), network architecture design.
- On-call availability is required.
Preferred Qualifications
- AWS certifications such as AWS Certified Solutions Architect and/or AWS Certified Security – Specialty.
- CISSP, CISM, CCSP, Microsoft, VMware, Cisco, or comparable professional certifications.
- MBA or advanced degree with a technology, cybersecurity, or business leadership focus.
- Experience with Infrastructure as Code and cloud automation.
- Experience securing cloud-native applications, containers, APIs, and CI/CD environments.
- Experience operating in organizations with mature cybersecurity, compliance, audit, and cybersecurity insurance requirements.
- Demonstrated ability to lead cross-functional teams in a fast-paced environment while managing multiple projects related to IT risk management & governance.
- Excellent communication skills with the capacity to translate technical concepts into clear guidance for diverse audiences.
#ILL2
Pay: $170,000.00 - $200,000.00 per year
Benefits:
- Dental insurance
- Health insurance
- Life insurance
Application Question(s):
- This job requires on-call availability. Are you comfortable with that requirement?
Education:
Experience:
- Information security: 10 years (Preferred)
- IT: 10 years (Preferred)
- Network infrastructure: 10 years (Preferred)
- IT management: 10 years (Preferred)
- Cybersecurity: 10 years (Preferred)
- NIST standards: 10 years (Preferred)
- Cloud security: 10 years (Preferred)
- AWS: 10 years (Preferred)
License/Certification:
Work Location: In person
