Information Security Operations Manager

REMOTE / 145-155K + Bonus / Information Security Operations Manager /

**Security Operations Within Enterprise Environment**

The Information Security Manager is a senior-level role within the information security team responsible for establishing and maintaining effective operations and governance practices in North America. This role plays a critical role in ensuring that information security operations and risk management processes align with industry best practices, regulatory requirements, and business objectives.

RELEVANT RESPONSIBILITIES

• Coordinate day-to-day Security Operations across teams.
• Oversee Managed Security Service Provider ensuring vendor provides the essential information security services.
• Manage a comprehensive approach to identifying, assessing and remediating information security vulnerabilities.
• Ensure security policies are communicated to relevant stakeholders and regularly reviewed and updated regularly to address emerging threats, regulatory changes, and business needs.
• Establish and maintain a security governance committee or similar governance structure to provide oversight and strategic direction for cybersecurity initiatives.
• Collaborate with business units and IT teams to ensure that risk management practices are integrated into overall risk management framework.
• Define and implement a security framework that aligns with industry standards and regulations (e.g., ISO 27001, NIST Cybersecurity Framework).
• Conduct regular risk assessments to identify and prioritize cybersecurity risks to assets, including information systems, networks, and data.
• Establish and maintain processes and criteria for assessing and managing the cybersecurity risks associated with third-party vendors and partners.
• Standardize, improve, and lead responses to customer requests specific to cybersecurity intended to ensure trust and serve both new and existing clients..

Education/Experience:

• Bachelor's or master’s degree in a relevant field such as Cybersecurity, Information Security, Risk Management, or equivalent work experience.
• 7-10 years in a similar role, demonstrating expertise in security governance, risk management, and compliance.
• Professional certifications such as CISSP, CISM, CRISC, or equivalent are highly desirable