Information Security Manager

Be yourself at Protolabs

Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. We are an equal opportunity employer, and we are committed to building a diverse team that feels they are valued in the workplace. So do you feel you do not meet every single requirement but still intrigued? We encourage you to still apply!

You can help make our company even better. We do not discriminate based on race, color, national origin, sexual orientation, gender, age, mental or physical ability, or any way you represent yourself. We strongly believe diversity makes for more successful teams.

Why Protolabs?

We are the leaders in digital manufacturing. We hire doers, makers, and creative thinkers who tackle our roles with an entrepreneurial spirit. Our culture is centered around meaningful work that brings new and innovative products to market at unprecedented speeds. We are a diverse team that comes from all walks of life and take pride in our team who is smart, genuine, humble, and passionate about what we do.

It’s our people who fuel our creativity and make our culture feel like home.

Join our team as an Information Security Manager!

This is a fixed hybrid (Tuesday, Wednesday, and Thursday) role based out of HQ in Maple Plain, MN.

Join Protolabs as our Information Security Manager and play a pivotal role in protecting the digital backbone of a global leader in digital manufacturing. In this highly visible role, you will shape and lead our worldwide security operations and compliance strategy across cloud, IT, and advanced manufacturing environments.

You’ll own and evolve our security operations, governance, risk, and compliance programs—ensuring we meet and exceed key regulatory, industry, and customer requirements, including ITAR, SOX ITGC, PCI DSS, GDPR, and DoD frameworks such as NIST SP 800‑171 and CMMC Level 2.

As a trusted security leader, you will partner across engineering, IT, product, and business teams to strengthen operational maturity, guide incident response, oversee audits, and continuously enhance Protolabs’ security posture. This is an opportunity to drive meaningful transformation, lead at a global scale, and influence how a cutting‑edge manufacturing organization securely innovates.

• Lead global security operations, including SOC oversight, SIEM/SOAR tuning, threat detection, and incident response.
• Serve as incident commander for security events and drive end‑to‑end investigation, containment, and remediation.
• Direct vulnerability management across IT, cloud, and OT environments with SLA‑based remediation.
• Manage endpoint, network, and cloud security technologies (EDR/EPP, DLP, CASB, WAF, segmentation).
• Strengthen plant‑floor and OT security in partnership with manufacturing teams.
• Oversee compliance programs for NIST 800‑53/800‑171, SOX ITGC, PCI DSS, ITAR, and CMMC Level 2.
• Lead readiness assessments, audits, evidence management, and remediation tracking.
• Maintain security policies, standards, and procedures aligned with regulatory and customer requirements.
• Manage third‑party risk assessments and ongoing vendor compliance monitoring.
• Lead security governance and risk assessments; track mitigation and communicate risk posture to leadership.
• Ensure adherence to export control requirements, including ITAR and foreign‑person access controls.
• Manage and mentor a global security operations and compliance team.
• Build multi‑year security roadmaps and budgets aligned to company strategy.
• Collaborate across IT, OT, Engineering, Legal, HR, Finance, and other teams on key initiatives.
• Support security and compliance due diligence for M&A activities.
• Drive global security training and awareness programs, including annual and role‑based training.

• Bachelor’s Degree in Information Security, Information Technology, Computer Science, or equivalent experience.
• 10+ years of experience across security operations, incident response, vulnerability management, and GRC.
• Experience in regulated environments including ITAR, SOX, PCI DSS, GDPR, and DoD compliance requirements.
• Strong working knowledge of security frameworks: NIST
  800‑53/…