Manager, IT Security
Foley · Remote US
About this role
## Manager, IT Security Foley is modernizing its technology infrastructure and expanding the use of AI across the business. We’re looking for a **hands-on Manager of IT Security** to lead security operations, strengthen our security posture, and proactively identify and address risks. You’ll manage one security engineer while staying deeply involved in technical execution. ### What you’ll do - **Cloud & Identity Security**: Lead security improvements across **AWS** (IAM, multi-account governance, networking, security monitoring). Manage identity and access controls through **Microsoft Entra ID**, Conditional Access, SSO/SCIM, and privileged access management. - **Endpoint & Security Operations**: Maintain and strengthen endpoint security, patching, **EDR** coverage, and security monitoring across our managed fleet. Optimize tools including **Rapid7, Intune, NinjaOne**, and related platforms. - **Vulnerability Management & Incident Response**: Own vulnerability management (detection → prioritization → remediation). Lead incident response, coordinate with our **MDR** provider, and drive corrective actions to reduce future risk. - **AI Security**: Partner with AI and Engineering teams to secure AI tools, agents, and integrations. Implement guardrails for data protection, access permissions, non-human identities, and responsible AI adoption. - **Security Compliance & Audits**: Own **SOC 2 Type II** audit process end to end (controls, evidence collection, audit readiness, remediation, and coordination with external auditors). Maintain **PCI DSS** compliance requirements and support security policies and vendor risk assessments. - **Secure Engineering**: Partner with Engineering to strengthen security across development environments, **CI/CD**, source control, and application integrations. - **Security Roadmap & Continuous Improvement**: Monitor emerging threats, evaluate security risks, and drive improvements. Develop and execute a prioritized security roadmap with the Director of Infrastructure. - **Team Leadership & Collaboration**: Manage and develop a security engineer while partnering across Infrastructure, Engineering, Compliance, Legal, and business teams. ### Who you are - **7+ years** of information security experience, including leading security initiatives/programs and managing/formally leading security professionals. - Strong **hands-on AWS security** experience (IAM, multi-account governance, network security; AWS-native services like **GuardDuty, Security Hub, CloudTrail**). - Deep experience with **Microsoft Entra ID** (Conditional Access, SSO/federation, privileged access, identity lifecycle management). - Demonstrated experience with **endpoint security**, vulnerability management, incident response, and **MDR/SOC** partnerships. - Proven experience owning **SOC 2 Type II** audits end to end (control implementation, evidence collection, audit coordination, remediation). - Working knowledge of **AI security risks** (data leakage, over-privileged agents, non-human identities, secure AI integrations). - Proactive risk identification and solution recommendations, with strong communication across technical and business audiences. ### Preferred - Experience with **PCI DSS** and frameworks such as **NIST CSF, ISO 27001, CIS Controls**. - Relevant certifications such as **CISSP, CCSP, AWS Certified Security – Specialty,** or **Microsoft SC-series**. - Scripting/automation and/or **infrastructure-as-code** experience. - Experienc
Listing freshness
CronJobs last confirmed this listing 55m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.