Information Security Manager

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

CORP REG FULL TIME Baton Rouge, LA, US

Information Security Manager

Reports to:VP of IT or Director of Information Security

Location:Remote

Employment type:Full-time

The Information Security Manager leads the organization's security operations and risk program. The role oversees security monitoring and incident response, manages the SOC and its vendors, reports on security posture to executive leadership, and ensures the organization meets its compliance and audit obligations. It combines hands‑on operational oversight with governance and communication.

• Oversee 24/7 security monitoring and threat detection, and review, validate, and prioritize alerts from the managed SOC, SIEM, EDR/XDR, identity, email, and network security tools.
• Act as the internal escalation point for security incidents, including phishing, malware, account compromise, data exposure, and policy violations.
• Lead incident response from detection through containment, eradication, recovery, and post‑incident review.
• Coordinate remediation with IT Operations, Helpdesk, M365 and network teams, legal, HR, communications, and third‑party vendors.
• Maintain detailed incident documentation, timelines, and post‑incident summaries.
• Maintain and test incident response plans, runbooks, and tabletop exercises.

• Manage the internal or outsourced SOC, including MSSP and MDR providers, and serve as the primary technical point of contact for the managed SOC/MDR provider.
• Validate SOC findings, challenge false positives, and ensure alerts are actionable and risk‑based.
• Participate in tuning discussions to improve alert quality and reduce noise.
• Define, monitor, and enforce vendor SLAs, ensuring incidents meet defined response expectations.
• Evaluate and select security vendors and tools, and manage contracts, renewals, and budgets.
• Conduct regular vendor reviews and elevate performance issues.

• Produce recurring security reports for the VP of IT, executive leadership, and board members, including incident summaries, threat trends and metrics, and risk posture and exposure overview.
• Translate technical security data into clear, non‑technical business risk language to support decision‑making and budget requests.
• Provide ad‑hoc briefings following significant incidents or emerging threats.

• Run risk assessments and maintain the risk register and remediation tracking.
• Ensure alignment with applicable frameworks and regulations (e.g., HIPAA, NIST CSF, ISO 27001, SOC 2, PCI DSS, as relevant), including providing operational evidence, incident data, and security metrics to support compliance efforts.
• Develop and maintain security policies, standard procedures, and runbooks.
• Identify recurring issues, control gaps, and opportunities to improve detection, response, and remediation processes.
• Partner with IT leadership to improve overall security maturity and drive the security roadmap.
• Lead security awareness and training initiatives.

• Serve as the primary contact for internal, external, and regulatory audits.
• Coordinate evidence collection, control testing and responses to audit findings.
• Track remediation of audit findings through to closure.

• Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent experience.
• 6-10 years of experience in cybersecurity, security operations, or incident response, including at least 2 years in a lead or…