1 день назад
Senior Information Security Manager
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Information Security Manager (AI/SaaS): Building and scaling preventative security capabilities across cloud, SaaS, endpoint, identity, network, and data environments with an accent on hands-on control implementation, risk reduction, and security compliance. Focus on automating security workflows, integrating controls into modern AI infrastructure, managing incident readiness, and translating frameworks such as SOC 2, ISO 27001, GDPR, and the EU AI Act into technical safeguards.
Location: Remote
Company
Backstory, formerly , provides an AI answers platform that helps sales teams retrieve trusted answers from sales interactions and coordinate deals more effectively.
What you will do
- Own and mature preventative security capabilities across cloud, SaaS, endpoint, identity, network, and data environments.
- Translate security objectives into technical requirements, controls, tooling, and implementation plans.
- Evaluate, configure, and deploy security platforms for DLP, insider threat, endpoint security, IAM, vulnerability management, access control, and monitoring.
- Assess security posture, prioritize risks, and drive remediation through completion while building metrics and reporting.
- Partner with IT, Engineering, DevOps, Product, Security Operations, and business teams to integrate controls and improve threat visibility.
- Develop and test incident response playbooks, business continuity and disaster recovery plans, and support audits and compliance initiatives.
Requirements
- 7+ years of progressive information security experience, including hands-on implementation of enterprise security controls.
- 2+ years of technical leadership, team lead, or people management experience.
- Deep knowledge of cloud, SaaS, endpoint, identity, network, data, and AI security, including Agentic AI environments.
- Experience with DLP, IAM, endpoint security, vulnerability management, insider threat, access management, security monitoring, and third-party API/OAuth integrations.
- Experience with Python scripting, Terraform, policy as code, CI/CD security guardrails, and modern Mac, Linux, cloud, SaaS, and open-source environments.
- Working knowledge of NIST, CIS, ISO 27001, SOC 2, Zero Trust, and relevant regulations including GDPR, CCPA/CPRA, and the EU AI Act.
Nice to have
- Experience working within U.S.-based technology environments and familiarity with enterprise security expectations.
Culture & Benefits
- Remote work environment.
- Autonomous role in a fast-moving organization with evolving priorities.
- Close collaboration with the CISO, CIO, CTO, IT, Engineering, Product, and business stakeholders.
- Opportunity to provide technical direction and mentorship to security engineers, analysts, IT partners, and external contractors.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →