Information Technology Security Manager

1 week ago Be among the first 25 applicants

This range is provided by Calance. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

$150.00/yr - $180.00/yr

Direct message the job poster from Calance

About the Company:
Our client is looking for a Senior Manager – Cloud Security, This will be Hybrid Role in Bolingbrook, IL.

About the Role:
The Senior Manager – Cloud Security will lead the strategic direction, execution, and continuous improvement of Company's cloud security posture across Google Cloud and Microsoft Azure environments. This role is responsible for overseeing the development, deployment, and management of cloud security strategies and solutions that ensure the integrity, confidentiality, and availability of our systems and data. The Senior Manager will work closely with other IT and business leaders to define security best practices, manage risk, and ensure that our cloud infrastructure is secure, compliant, and optimized for performance.

Responsibilities:

• Cloud Security Strategy & Governance:
• Define and execute the strategic direction for cloud security across Google Cloud and Azure environments.
• Establish governance frameworks, security policies, and best practices for securing cloud workloads, services, and data.
• Align cloud security initiatives with Company’s broader security and business goals, ensuring compliance with industry regulations and internal standards.
• Lead the design, implementation, and ongoing management of security controls within Google Cloud and Azure, including network security, identity and access management (IAM), encryption, threat detection, and vulnerability management.
• Oversee the integration of security tools and platforms to monitor and protect cloud environments, ensuring that cloud resources are securely configured, optimized, and compliant.
• Cloud Security Incident Response & Risk Management:
• Develop and lead incident response strategies for cloud environments, ensuring that any security events in Google Cloud and Azure are swiftly addressed.
• Work closely with the security operations team to identify, assess, and mitigate cloud-specific risks, and lead the response to potential threats or vulnerabilities.
• Participate in regular risk assessments and threat modeling to proactively address potential weaknesses in the cloud security architecture.
• Identity and Access Management (IAM):
• Lead the development and management of IAM strategies across cloud environments, ensuring robust access controls and least-privilege principles are enforced in both Google Cloud and Azure.
• Implement and manage role-based access controls (RBAC), single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM) to protect critical cloud resources.
• Collaboration & Stakeholder Engagement:
• Act as the cloud security subject matter expert, collaborating with cross-functional teams including IT, Dev Ops, engineering, and compliance to ensure security is embedded throughout the development lifecycle.
• Work closely with internal and external auditors, regulators, and legal teams to ensure adherence to security and compliance requirements across cloud environments.
• Cloud Security Automation & Optimization:
• Lead initiatives to automate cloud security controls and processes, using tools like Terraform, Cloud Formation, or other infrastructure-as-code (IaC) solutions to enforce security configurations in Google Cloud and Azure.
• Continuously assess and optimize security performance and efficiency in cloud platforms, utilizing cloud-native security tools like Google Cloud Security Command Center and Azure Security Center.
• Cloud Compliance & Regulatory Management:
• Ensure that cloud environments comply with applicable regulatory requirements, such as GDPR, CCPA, HIPAA, and SOC 2, and guide the organization through relevant cloud security audits.
• Lead the implementation of security frameworks like CIS Benchmarks or NIST CSF in both Google Cloud and Azure.
• Cloud Security Training & Awareness:
• Develop and deliver training programs to upskill…