Technical Security Manager

Job Overview

The Security Manager will primarily support our Information Security program by ensuring and maintaining compliance with external stakeholders and security frameworks. The role involves coordinating with teams in security monitoring, cloud infrastructure, enterprise support, software development, educational testing, and project/customer management.

• Maintain, mature, and take ownership of our program ensuring conformance to security standards (including ISO 27001, ISO 27018, ISO 42001, privacy laws, ISO 9001, GovRAMP, FedRAMP, NIST 800, SOC, and CIS Top Controls).
• Facilitate annual independent audits by third‑party security and privacy experts: create audit plans, coordinate with stakeholders, review reports, and remediate findings.
• Plan and manage multiple security improvement projects from requirements through deployment and implementation.
• Manage document and record control processes, maintaining accurate inventories and records of compliance artifacts.
• Lead Security Awareness and related training programs, improving processes, platforms, and systems supporting campaigns and content.
• Create, monitor, and report on training campaigns.
• Support business development by responding to requests for security and privacy information in proposals for new business.
• Perform security risk assessments of software acquisitions, technical services, business systems, and new technologies.
• Own and administer a GRC tool to track security controls and conformance status, ensuring artifacts are recorded and updated.
• Conduct enterprise risk assessments and report findings to senior management on an ongoing basis and as needed.
• Assist in continual improvement by examining the current security posture, identifying gaps, and recommending programs.
• Manage privacy risks, such as exposures from cookies and APIs, and maintain privacy policies with compliance.

• Bachelor’s Degree in Information Security, Cybersecurity, computer science, engineering, Information Systems, or a related technical field.
• Minimum 5 years hands‑on experience in information security.
• Extensive and deep knowledge of security and privacy frameworks, standards, and industry best practices.
• Knowledge of privacy laws and principles such as GDPR, COPPA, and FERPA.
• Extensive and deep knowledge of tools and techniques used to protect against cybersecurity attacks and respond to incidents.
• Information Security certifications such as CISSP, GIAC, ISACA, AWS Security; PMP certification a plus.
• Experience with GRC tools.
• Exceptional verbal and written communication skills, capable of detailed technical discussions and executive‑level communications.
• Demonstrated working experience with:
  • Security and privacy standards such as ISO, GovRAMP, FedRAMP, and other best‑practice frameworks.
  • Writing, developing, and maintaining official security and privacy‑relevant records and documentation.
  • Conducting risk assessments, gap analysis, improvement plans, and tracking corrective actions or POAMs to closure.
  • Developing and executing project management plans for technical projects.
  • Coordinating with senior business leaders, subject matter experts, technical leaders, and third‑party consultants.
• Experience in AI Governance highly desirable, including frameworks such as NIST and ISO 42001.

We are dedicated to fostering a culture that celebrates unique backgrounds, ideas, and experiences. All qualified applicants will receive consideration for employment without discrimination on the basis of race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, protected veteran status, or disability.