Manager - Information Security Compliance (Cybersecurity)
ΠΡΡΡ & Π‘ΠΎΠΏΡΠΎΠ²ΠΎΠ΄
ΠΠ»Ρ ΠΌΡΡΡΠ° Ρ ΡΡΠΎΠΉ Π²Π°ΠΊΠ°Π½ΡΠΈΠ΅ΠΉ Π½ΡΠΆΠ΅Π½ Plus
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π²Π°ΠΊΠ°Π½ΡΠΈΠΈ
Location: Reston, Virginia, United States; hybrid work schedule with office presence required.
Salary: $135,800β$183,800 annual base salary, with potential discretionary bonus and stock awards depending on role eligibility.
Company
provides internet infrastructure services, including DNS services, focused on the security, stability, and resiliency of the internet.
What you will do
- Manage the security control assurance program, including control design reviews, testing, effectiveness assessments, gap remediation, and reporting.
- Manage compliance with external regulatory obligations and coordinate responses to regulator information requests.
- Build continuous control monitoring by translating security requirements into automated tests and evidence collection practices.
- Collaborate with engineering and system owners to design, improve, and operationalize security controls.
- Report on compliance results, risk trends, and remediation priorities through dashboards, reports, and executive briefings.
- Lead security compliance practitioners and contribute to enterprise information security policies and standards.
Requirements
- 8+ years of progressively responsible experience in information security governance, risk, compliance, security assessment, or audit.
- 4+ years of security control assessment experience and 2+ years of experience leading or managing others.
- Hands-on expertise with CIS Controls, SOC 2/3 Trust Services Criteria, NIST Cybersecurity Framework, and NIST SP 800-53.
- Experience testing and mapping controls across multiple frameworks in a public company environment.
- Technical understanding of security controls, control objectives, enterprise IT environments, and tailored control testing.
- Bachelorβs degree in Information Systems, Computer Science, or a related field, or equivalent experience.
Nice to have
- Professional security certification such as CISSP, CISA, CISM, or CRISC.
Culture & Benefits
- Mission-focused, values-driven environment focused on building a more secure internet.
- Dynamic and flexible work environment with a hybrid schedule.
- Competitive benefits and opportunities for career growth.
- Discretionary bonus based on individual and company performance.
ΠΡΠ΄ΡΡΠ΅ ΠΎΡΡΠΎΡΠΎΠΆΠ½Ρ: Π΅ΡΠ»ΠΈ ΡΠ°Π±ΠΎΡΠΎΠ΄Π°ΡΠ΅Π»Ρ ΠΏΡΠΎΡΠΈΡ Π²ΠΎΠΉΡΠΈ Π² ΠΈΡ ΡΠΈΡΡΠ΅ΠΌΡ, ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΡ iCloud/Google, ΠΏΡΠΈΡΠ»Π°ΡΡ ΠΊΠΎΠ΄/ΠΏΠ°ΡΠΎΠ»Ρ, Π·Π°ΠΏΡΡΡΠΈΡΡ ΠΊΠΎΠ΄/ΠΠ, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡΠ΅ ΡΡΠΎΠ³ΠΎ - ΡΡΠΎ ΠΌΠΎΡΠ΅Π½Π½ΠΈΠΊΠΈ. ΠΠ±ΡΠ·Π°ΡΠ΅Π»ΡΠ½ΠΎ ΠΆΠΌΠΈΡΠ΅ "ΠΠΎΠΆΠ°Π»ΠΎΠ²Π°ΡΡΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡΠΈΡΠ΅ Π² ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΊΡ. ΠΠΎΠ΄ΡΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β