Senior Manager, Information Security

Job Responsibilities

• Lead IT compliance programs aligned to ISO/IEC 27001, CMMC Level 2, SEMI E187, and SOX IT controls.
• Drive audit readiness, internal assessments, remediation activities, and continuous compliance improvement.
• Own and mature cybersecurity posture management practices across infrastructure, endpoints, and cloud services.
• Oversee vulnerability management programs, including risk‑based prioritization, remediation tracking, and executive reporting.
• Own incident response planning and execution for IT and cybersecurity incidents.
• Define and validate RTO/RPO objectives across hybrid on‑prem and cloud environments.
• Lead vendor, partner, and supply‑chain IT and cybersecurity risk management programs.
• Contribute to the development and execution of Onto’s 3‑year IT and Security strategic roadmap.

• 10+ years of progressive experience in IT leadership, cybersecurity, or enterprise risk management.
• Demonstrated leadership of ISO 27001, CMMC Level 2, and SOX IT control programs.
• Experience contributing to multi‑year (3+ year) IT or security strategic planning and roadmaps.
• Hands‑on experience with cybersecurity posture management and vulnerability management programs.
• Strong understanding of incident response, BCP/DRP, and operational resilience in hybrid IT environments.
• Experience managing vendors, partners, and supply‑chain IT/security risk.
• Strong executive communication, stakeholder management, and continuous improvement mindset.