Senior Manager, Information Security & IT
Genea · Remote, US
About this role
**Senior Manager, Information Security & IT** **Reports to:** Chief Technology Officer **Department:** Technology – Information Security & IT **Location:** Irvine, CA or US-Remote ## About Genea Genea provides cloud-based physical security, submeter billing, and on-demand HVAC solutions to over 1 million users across 39 countries. Genea is mission-driven and emphasizes teamwork, transparency, and authenticity. (Top Workplace 2021–2025; 401k matching, PTO, 100% paid parental leave, remote work options, and development/training opportunities.) ## Job Overview Genea is seeking a hands-on **Senior Manager, Information Security & IT** to lead and continuously improve cybersecurity and corporate IT programs. Reporting to the CTO, you’ll oversee cybersecurity and IT across compliance, cloud and application security, incident response, identity and access management, and corporate IT. Genea is already **SOC 2 Type 2 compliant**. This role will maintain and mature the program and help drive additional initiatives, including **ISO 27001** and other relevant frameworks as the business evolves. You’ll also help Genea **adopt AI securely**, understanding evolving risks from AI and agentic technologies, and leveraging AI/automation to strengthen cybersecurity operations. ## Duties and Responsibilities ### Cybersecurity Compliance & Programs - Own and continuously mature Genea’s cybersecurity compliance program (SOC 2 Type 2), including policies, controls, audit readiness, evidence management, risk assessments, cybersecurity awareness, and readiness for ISO 27001 and other frameworks. - Establish governance and guardrails for secure enterprise adoption of AI (approved AI technologies, data protection, third-party AI risk, responsible usage, and emerging AI cybersecurity requirements). - Define measurable cybersecurity **KPIs/KRIs**, risk reporting, and provide regular executive program updates. ### Cloud & Application Security - Drive Genea’s cloud and application security program in partnership with Engineering, DevOps, Platform, and Product teams—secure-by-design for traditional applications and AI/GenAI capabilities. - Strengthen security across **AWS and Azure**: IAM roles/permissions, least privilege, network controls, secrets management, encryption, logging, secure configurations, infrastructure hardening, and secure access to AI models, agents, APIs, and data. - Mature secure SDLC and DevSecOps practices (including threat modeling, architecture reviews, and security testing such as SAST/DAST).
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.