Manager, Information Security

The Manager, Information Security leads Jewelers Mutual's security engineering and operations function, overseeing information security engineers and analysts, security tooling, vulnerability management, and incident response readiness. This hands‑on leader partners with the CISO, CIO, IT infrastructure, Dev Ops, cloud engineering, application teams, and GRC to strengthen security controls, mature operational processes, and align security work to business risk priorities. The role balances team leadership with technical execution, vendor oversight, metrics reporting, and continuous improvement of the information security program.

Since 1913 we’ve been committed to supporting the Jewelry industry and putting customers at the center of everything we do. With over a century of trusted expertise, we’re financially strong, forward‑thinking, and driven by curiosity. Guided by our core values of Agility, Accountability, and Relevancy, we lead through innovation.

As a technology focused organization, we embrace cutting‑edge tools and data‑driven insights to continuously improve our products, services, and customer experience. Our mission is to be the industry’s most trusted advisor by investing in our people, adopting new technologies, and striving for excellence.

We’re dedicated to fostering growth through collaboration, powered by bold thinking, teamwork, and the passion of our people.

• Lead, coach, and develop a team of information security engineers and analysts; set expectations, conduct regular one‑on‑ones, support career growth, and manage performance.
• Own security operations and vulnerability management, including security tooling, managed services relationships, daily incident triage, response coordination, and continuous improvement.
• Serve as a technical lead for security architecture within the security operations and engineering domain; provide input to enterprise security architecture in partnership with the CISO.
• Partner with IT infrastructure, cloud engineering, Dev Ops, application teams, and business stakeholders to embed security controls and requirements into systems and delivery pipelines.
• Oversee vulnerability management operations, including scanning cadence, remediation service‑level expectations, remediation coordination, reporting, and escalation.
• Manage MSSP/SOC relationships, includingescalationworkflows, service‑level accountability, operating procedures, and alignment with JM's incident response practices.
• Define, track, and report securityoperationsKPIs and KRIs that connect technical findings to business risk; present updates to information security leadership and other leaders as needed.
• Support budgeting, vendor evaluations, renewals, and contract negotiations for security operations tools and services in partnership with procurement and legal.
• Develop andmaintainsecurity operationsprocedures, runbooks, and playbooks to support consistent, measurable, and repeatable operations.
• Support the CISO in advancing the information security program maturity roadmap aligned to NIST CSF and applicable regulatory requirements.
• Collaborate with GRC on audit readiness, control evidence collection, and gap remediation for SOC 2, NYDFS Part 500, and other applicable frameworks.
• Participate in off‑hoursescalation rotation for critical security incidents as needed.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Directly supervise Information Security Engineers and Analysts. Responsible for hiring, onboarding, performance management, coaching, and professional development of direct reports. Provides functional direction to managed service providers within the security operations scope.

• Bachelor’s degree in computer science, Information Security, Information Technology, or a related field, or equivalent work experience.
• 7+years of progressive, hands‑on technical experience in information security roles.
• 2+years of experience managing or leading a security team, including direct supervision of technical staff.
• Demonstrated experience managing or directly…