Manager Information Security and Risk Management – Enterprise Data Security (Cybersecurity)

Location: Remote or office-based in Pennsylvania, United States. US citizenship is required due to contractual and access requirements. A physical work site is required.

Company

hirify.global and enGen manage enterprise information security, risk management, and data protection operations.

What you will do

• Lead the enterprise data protection program and define its vision, roadmap, architecture, and execution strategy.
• Manage a multidisciplinary team of analysts, product owners, architects, and engineering resources.
• Oversee data loss prevention, data classification, file and database activity monitoring, encryption, key management, digital rights management, and emerging data security capabilities.
• Plan and direct department operations, staffing, budgets, policies, projects, and risk management activities.
• Partner with security, cloud, infrastructure, application, privacy, legal, and business teams to protect sensitive information.
• Communicate security risks, metrics, priorities, and recommendations to audiences across the organization and to executive leadership.

Requirements

• US citizenship is required.
• Bachelor’s degree in information security, information systems, information assurance, computer science, or a related field, or six years of relevant experience in substitution.
• 7–10 years of experience in information security, information risk management, or information technology.
• 7–10 years of experience developing, communicating, and presenting information security and risk management concepts.
• Experience with enterprise data protection strategies, roadmaps, operating models, and technologies including DLP, DSPM, data classification, encryption, key management, and insider risk solutions.
• Experience leading security architecture, engineering, and operational teams across cloud, SaaS, on-premises, and hybrid environments.

Nice to have

• Master’s degree in computer science, information security, or a related field.
• 10–15 years of experience in information security, information risk management, or information technology.
• Experience with HITRUST CSF, NIST 800-83, SSAE 16, or SOC 2 audits.
• CISSP, CISM, CRISC, or ITIL certification.
• Experience with Microsoft Purview, Forcepoint, Varonis, Netskope, BigID, Microsoft Defender, IBM Guardium, Imperva SecureSphere, or Cyera.

Culture & Benefits

• Remote and office-based work arrangements are listed for the role.
• Travel is expected at 0%–25%.
• Work includes coaching, employee development, training, performance management, and recognition.
• The role supports continuous improvement, information security innovation, and organizational change.
• Responsibilities include compliance with HIPAA, PCI DSS, FIPS-140, corporate policies, and information security standards.