Manager of CyberSecurity

Overview

We are seeking a hands-on and strategic Security Manager to lead and mature our client's information security program. This role will be responsible for protecting company systems, customer data, and cloud infrastructure while enabling the business to scale securely. As a key member of the technology team, the Security Manager will oversee security operations, governance, risk, and compliance efforts, with a strong focus on AWS cloud security.

Key Responsibilities

Security Strategy & Leadership

• Develop, implement, and continuously improve the company’s information security program
• Partner with executive leadership to align security initiatives with business objectives
• Establish and maintain security policies, standards, and procedures

Cloud Security (AWS)

• Design and manage security controls across AWS environments (IAM, VPC, logging, encryption)
• Monitor and respond to cloud security risks, vulnerabilities, and misconfigurations
• Partner with DevOps/Engineering to embed security into CI/CD pipelines (DevSecOps)

Security Operations

• Lead incident response efforts, including investigation, containment, and remediation
• Manage vulnerability scanning, penetration testing, and remediation tracking
• Oversee endpoint, network, and application security controls

Governance, Risk & Compliance

• Maintain and support compliance initiatives (SOC 2, ISO 27001, HIPAA or similar as applicable)
• Conduct risk assessments and manage third-party/vendor risk programs
• Ensure proper documentation and audit readiness

Awareness & Training

• Develop and deliver security awareness training across the organization
• Promote a strong security culture and best practices company-wide

Vendor & Tool Management

• Evaluate, implement, and manage security tools (SIEM, EDR, CSPM, etc.)
• Manage relationships with external security vendors and consultants

Qualifications

• 7+ years of experience in information security, with at least 2 years in a leadership or ownership role
• Strong experience securing

AWS environments (IAM, CloudTrail, GuardDuty, Security Hub, etc.)

• Experience with security frameworks such as

SOC 2, ISO 27001, NIST, or CIS

• Hands-on experience with incident response, vulnerability management, and security tooling
• Understanding of networking, system architecture, and application security
• Ability to balance security best practices with business needs in a growing company

Preferred Qualifications

• Experience in consumer services, fintech, or benefits platforms
• Familiarity with compliance requirements related to sensitive customer data
• Certifications such as CISSP, CISM, AWS Security Specialty, or similar
• Experience working in a mid-sized or high-growth environment

What Success Looks Like

• Security program is structured, documented, and audit-ready
• AWS environment is secure, monitored, and continuously improving
• Security risks are proactively identified and mitigated
• The organization demonstrates strong security awareness and accountability

Apply tot his job Apply To this Job