Senior Information Security Manager – Cyber Defense Management

Role Overview

• Manage and develop a team of individual contributors and managers in roles with moderate complexity and risk
• Maintain a broad awareness of the state of information security companywide
• Identify and recommend complex and innovative solutions addressing functions including vulnerability detection, threat data, network intrusion and development, and implementation of vulnerability mitigation strategies
• Identify security risks and solutions for networks and virtual private network applications, security tools, public key infrastructures, authentication and directory services, and access management services
• Identify, formulate, implement information security and Line of Business management
• Determine appropriate strategy for information security policy, standards and procedures for systems, applications and tools
• Set guidelines for compliance and risk management requirements for supported area and work with other stakeholders to implement key risk initiatives
• Advise more experienced management on issues with high, critical impact
• Collaborate and influence all levels of professionals including more experienced managers
• Lead team to achieve objectives
• Interface with Information Security Industry Leaders, Financial industry Leaders, Analysts and Regulators
• Manage allocation of people and financial resources for Information Security Analysis
• Develop and guide a culture of talent development to meet business objectives and strategy
• Own consistent execution and governance of highly visible, mandatory cyber risk and control functions across the Cyber Defense domain.
• Drive effective execution of risk assessments, control testing, and challenge activities across all three lines of defense
• Manage CDM issue management coordination, and control maturity progression
• Oversee control operation for processes which span CDM teams
• Produce recurring executive level reporting and leadership updates translating cyber risk, control health, metrics, and trends into clear business context.
• Coordinate and implement assigned projects and initiatives.
• Play key role in executing Risk and Control Self-Assessment activities in partnership with Risk Assessable Unit (RAU) owner and Control management teams.
• Ensure Cyber Defense compliance with enterprise policies, standards, metrics, risk treatments, and issue remediation expectations
• Build and sustain a culture of accountability, talent development, and continuous improvement across the team.
• Establish and track performance goals and operational metrics for self and team.
• Monitor team deliverables to ensure timeliness, quality, and alignment with expectations.
• Oversee resource allocations to ensure commitments align with strategic objectives.
• Maintain a broad awareness of the state of information security across the enterprise and industry.
• Influence and oversee changes to information security policies, standards, and procedures, ensuring alignment with Enterprise Risk Management and required functions including Business Continuity Planning (BCP).
• Advise leadership or executive management on issues with high impact on the company.
• Recommend mitigation strategies for identified security risks.
• Support internal and external audits, regulatory reviews, and third-party assessments.

Requirements

• 7+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 3+ years of management or leadership experience
• Expertise across core Cyber defense domains including Incident Response, Data Loss Prevention, OSRT, CTI, and Endpoint Security solutions.
• Demonstrated ability to lead cross-functional initiatives, drive workflow integration, and prioritize enterprise-level initiatives
• Strong leadership skills with the ability to foster a collaborative, high-performance team culture grounded in continuous learning and improvement
• Excellent written, verbal, and executive-level presentation skills
• Proven leadership in highly regulated environments with strong project and program management capabilities
• Relevant industry certifications such as CISM, CISSP, CSSLP, GSLC or equivalent
• Master’s degree or equivalent bachelor’s in information technology, Cybersecurity, Computer Science, or related discipline (or equivalent professional experience and certifications)
• Ability to leverage AI to enhance efficiency and innovation.

Tech Stack

• Cyber Security

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement