Senior Manager, Cyber Security – SaaS

Responsibilities

• Define and execute Aravo’s security roadmap, aligning priorities with business goals and communicating progress through scorecards, dashboards, and KPIs
• Lead vulnerability management programs across product and infrastructure, ensuring effective triage, prioritization, and remediation
• Partner with Product Engineering to implement and maintain secure development practices, including code review and SDLC controls
• Establish and enforce company-wide security policies and standards in collaboration with Corporate IT
• Own and continuously improve Aravo’s cloud security posture in alignment with industry best practices and compliance frameworks
• Drive FedRAMP readiness and authorization efforts, coordinating cross‑functional execution
• Evolve and scale our compliance programs (e.g., SOC2) to meet changing business and regulatory needs
• Translate technical risk into strategic goals that drive informed decisions and measurable business outcomes across Engineering, Leadership, and Customers
• Maintain an accurate and actionable risk register, ensuring findings are tracked to closure
• Build relationships across the company to drive cross‑functional security execution
• Own security incident response planning and execution
• Lead and mentor security team members, fostering a culture of growth and continuous learning

• 8-12 years of progressive security experience, with 3-5 years in a leadership role
• Expertise in building vulnerability management programs in SaaS environments, including tool selection, risk‑based prioritization, and tracking remediation to closure
• Demonstrated ability to design and implement secure infrastructure across managed hosting, hybrid, and cloud environments
• Track record of managing compliance programs and implementing security frameworks (e.g., SOC2, NIST 800‑53), including control design, implementation, and continuous compliance monitoring
• Strong background in developing and maintaining a risk register and translating technical risks into business language
• Hands‑on experience with FedRAMP compliance programs, including control implementation, documentation, and authorization processes
• Proficiency in designing security metrics, dashboards, and KPIs that align with business outcomes
• Experience in designing and leading security incident response programs

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• AWS Security Specialty (SCS-C02)