Senior Manager, Information Security

Owns the organization's information security program, including governance, risk and compliance (GRC), audit and regulatory response, incident management, cloud security, and vendor risk oversight. Responsible for maintaining audit readiness, driving remediation efforts, ensuring compliance with regulatory requirements, and strengthening the organization's overall security posture. Leads the IT Infrastructure Analyst and partners closely with technology, compliance, and business leaders to implement and sustain effective security controls.

* Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.*

• Own and mature the information security program, including policies, risk assessments, controls, and security standards.
• Serve as the primary technology contact for audits, regulatory examinations, and security assessments.
• Lead security incident response, remediation efforts, and disaster recovery testing.
• Oversee cloud security, vulnerability management, privileged access governance, and certificate management.
• Manage third-party security reviews and vendor risk assessments.
• Maintain the security risk register and drive remediation of audit findings and control gaps.
• Partner with User Services to ensure effective access management and asset governance.
• Manage and develop the IT Infrastructure Analyst and translate security priorities into operational execution.
• Must be comfortable on camera and use Teams with all colleagues and in all department and company interactions.

• 5+ years of information security experience, including audit, compliance, or regulatory engagement.
• Experience in financial services, mortgage banking, or a regulated industry preferred.
• Strong knowledge of security controls, risk management, audits, and compliance frameworks.
• CISSP, CISM, CISA, CRISC, or similar certification preferred.
• Leadership experience and strong communication skills with auditors, regulators, and executive leadership.